packages feed

cpsa 2.2.8 → 2.2.9

raw patch · 103 files changed

+68088/−34373 lines, 103 filesdep +arraybinary-added

Dependencies added: array

Files

ChangeLog view
@@ -1,3 +1,51 @@+2012-05-25  John D. Ramsdell  <ramsdell@mitre.org>++	* cpsa.cabal (Version):  Tagged as version 2.2.9.++	* src/CPSA/Lib/Reduction.hs (begin, search): Collapsing is+	performed as a pre-processing stage before any tests are solved.+	As a result, there is no need for hulling, and it has been+	disabled.++2012-05-24  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Lib/Strand.hs (augment): Removed the ability to turn+	off displacement.++	* src/CPSA/Lib/Strand.hs (augmentAndDisplace): Put skeletons+	produced by displacement before the ones created by augmentation.++2012-05-23  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Lib/*.hs:  Added penetrator non-origination+	assumptions (pen-non-orig).++2012-05-22  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/SimpleDiffieHellman/Algebra.hs (normalize): Equality,+	comparison, and substitution normalize exponentiated values.++2012-05-21  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/SimpleDiffieHellman/Algebra.hs (idSubst, substChase):+	Produce canonical form for double exponents.++	* src/CPSA/SimpleDiffieHellman/Algebra.hs (equalTerm)+	(compareTerm): Compare double exponents using lists for efficiency+	and readability.++2012-05-14  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/DiffieHellmanNoReciprocal/LinDiophEq.hs: Used the+	method in the paper by Contejean and Devie for solving an+	inhomogeneous equation using the algorithm for the homogeneous+	equation solver.  The previous version buggy.++2012-05-04  John D. Ramsdell  <ramsdell@mitre.org>++	* src/CPSA/Graph/SVG.hs (kbutton): In a tree drawing, the label of+	a shape is now blue.+ 2012-02-27  John D. Ramsdell  <ramsdell@mitre.org>  	* cpsa.cabal (Version):  Tagged as version 2.2.8.
NEWS view
@@ -1,5 +1,23 @@ CPSA NEWS -- history of user-visible changes. +* Changes in version 2.2.9++** Penetrator non-origination assumptions added+   Atoms declared to be pen-non-orig cannot be originated by the+   adversary but can carried.  An atom assumed to be penetrator+   non-originating can be used to model passwords and similar+   concepts.  Several regular participants might know a password and+   originate it in a run of a protocol, but an idealized password is+   one the penetrator cannot guess.++** Collapsing is performed before test solving+   Previously, collapsing was performed on shapes and shapes that+   could have been derived via a dead skeleton and collapsing where+   missed.  For an example, see tst/preprocess.scm.++** Disabling displacement option retired+   The command-line option that disabled displacement has been removed.+ * Changes in version 2.2.8  ** Performance enhancement
cpsa.cabal view
@@ -1,5 +1,5 @@ Name:			cpsa-Version:		2.2.8+Version:		2.2.9 Maintainer:		ramsdell@mitre.org Cabal-Version:		>= 1.6 License:		BSD3@@ -44,16 +44,15 @@ Build-Type:		Simple Data-Files:    index.html cpsauser.html cpsa.mk Make.hs cpsaprimer.pdf-   cpsaoverview.pdf cpsaspec.pdf cpsadesign.pdf cpsasdha.pdf+   cpsaoverview.pdf cpsaspec.pdf cpsadesign.pdf cpsadha.pdf    ffgg.scm ns.scm or.scm woolam.scm yahalom.scm dhke.scm Data-Dir:	    	doc Extra-Source-Files:   Makefile ChangeLog README NEWS ghci cpsatst setup.bat doc/README   doc/Makefile doc/macros.tex doc/cpsaprimer.tex doc/bcasyntax.tex   doc/cpsaspec.tex doc/cpsadesign.tex doc/cpsaoverview.tex-  doc/cpsasdha.tex doc/cpsadiagrams.mp doc/strands.mp doc/cmstrands.mp+  doc/cpsadha.tex doc/cpsadiagrams.mp doc/strands.mp doc/cmstrands.mp   doc/carriers.mp doc/termtree.mp doc/cpsa.bib doc/SDAG.lhs-  doc/SimpleDiffieHellman.hs   src/index.html src/cpsacgi src/cpsacgi.py src/cpsa2svg src/cpsa.el   src/httpd_allow_execmem.te src/cpsaops.scm src/preskel src/cpsa.pl   src/pp.pl src/sexpr.pl src/prover9.pl src/zoom.js src/js2hs@@ -111,7 +110,7 @@  Executable cpsa   Main-Is:		CPSA/Lib/Main.hs-  Build-Depends:	base >= 3 && < 5, containers, parallel+  Build-Depends:	base >= 3 && < 5, containers, parallel, array   GHC-Options:     -Wall -fno-warn-name-shadowing -fwarn-unused-imports -threaded   Hs-Source-Dirs:	src@@ -122,6 +121,8 @@     CPSA.Lib.Displayer CPSA.Lib.Cohort CPSA.Lib.Expand CPSA.Lib.CPSA     CPSA.Lib.Reduction CPSA.Basic.Algebra CPSA.DiffieHellman.Algebra     CPSA.DiffieHellman.IntLinEq CPSA.SimpleDiffieHellman.Algebra+    CPSA.DiffieHellmanNoReciprocal.Algebra+    CPSA.DiffieHellmanNoReciprocal.LinDiophEq   if impl(ghc >= 7.0.0)     GHC-Options: -rtsopts @@ -168,6 +169,8 @@     CPSA.Annotations.Formulas CPSA.Annotations.Annotations     CPSA.Basic.Algebra CPSA.DiffieHellman.Algebra     CPSA.DiffieHellman.IntLinEq CPSA.SimpleDiffieHellman.Algebra+    CPSA.DiffieHellmanNoReciprocal.Algebra+    CPSA.DiffieHellmanNoReciprocal.LinDiophEq  Executable cpsaparameters   Main-Is:		CPSA/Parameters/Main.hs@@ -182,6 +185,8 @@     CPSA.Lib.Displayer CPSA.Lib.Cohort CPSA.Lib.CPSA     CPSA.Parameters.Flow CPSA.Basic.Algebra CPSA.DiffieHellman.Algebra     CPSA.DiffieHellman.IntLinEq CPSA.SimpleDiffieHellman.Algebra+    CPSA.DiffieHellmanNoReciprocal.Algebra+    CPSA.DiffieHellmanNoReciprocal.LinDiophEq  Executable cpsapp   Main-Is:		CPSA/Pretty/Main.hs@@ -219,3 +224,5 @@     CPSA.Logic.Logic     CPSA.Basic.Algebra CPSA.DiffieHellman.Algebra     CPSA.DiffieHellman.IntLinEq CPSA.SimpleDiffieHellman.Algebra+    CPSA.DiffieHellmanNoReciprocal.Algebra+    CPSA.DiffieHellmanNoReciprocal.LinDiophEq
doc/Makefile view
@@ -13,7 +13,7 @@ OVERVIEW = cpsaoverview DESIGN = cpsadesign SPEC = cpsaspec-SDHA = cpsasdha+DHA = cpsadha BIB = cpsa  TEX_SRCS = macros.tex bcasyntax.tex@@ -31,7 +31,7 @@ %.ind:	%.idx 	makeindex $* -all:	$(PRIMER).pdf $(OVERVIEW).pdf $(DESIGN).pdf $(SPEC).pdf $(SDHA).pdf+all:	$(PRIMER).pdf $(OVERVIEW).pdf $(DESIGN).pdf $(SPEC).pdf $(DHA).pdf  $(PRIMER).pdf:	$(MP_SRCS:.mp=-0.mps) $(TEX_SRCS) \ 		 $(PRIMER).tex $(PRIMER).bbl@@ -55,12 +55,12 @@ 	if test -f $(SPEC).idx; then $(MAKE) $(SPEC).ind; fi 	pdflatex $(SPEC).tex -$(SDHA).pdf: $(SDHA).tex $(SDHA).bbl-	if test ! -f $(SDHA).aux; then pdflatex $(SDHA).tex; fi-	pdflatex $(SDHA).tex+$(DHA).pdf: $(DHA).tex $(DHA).bbl+	if test ! -f $(DHA).aux; then pdflatex $(DHA).tex; fi+	pdflatex $(DHA).tex  CLEAN_FILES := $(PRIMER).pdf $(OVERVIEW).pdf \-		$(DESIGN).pdf $(SPEC).pdf $(SDHA).pdf \+		$(DESIGN).pdf $(SPEC).pdf $(DHA).pdf \ 	$(wildcard *.log *.aux *.toc *.mps *.mpx) \ 	$(wildcard *.bbl *.blg *.ind *.idx *.ilg *.out)
doc/README view
@@ -11,7 +11,7 @@  * cpsadesign.pdf: CPSA Design, a description of implementation choices -* cpsasdha.pdf: Simple Diffie-Hellman Algebra+* cpsadha.pdf: Diffie-Hellman Algebra  To build the documentation, you need Metapost and XY-pic.  On Linux, Metapost is supplied via the package texlive-metapost, and XY-pic is
− doc/SimpleDiffieHellman.hs 
@@ -1,212 +0,0 @@--- Unification and matching in a simple Diffie-Hellman algebra--module SimpleDiffieHellman where---- Equational unification and matching in an algebra with the--- following equation is used to analyze protocols that make use of--- the Diffie-Hellman problem.------      exp(exp(x, y), z) = exp(exp(x, z), y)------ The module shows how to perform the unification and matching.--import Char(isDigit, isAlpha)---- TERMS---- Variables are just integers so that it is easy to freshly generate--- them.--type Var = Int--data Term                       -- A term is-    = V Var                     -- a variable, or a-    | F String [Term]           -- function symbol and a list of terms---- Equality modulo the equation: exp(exp(x, y), z) = exp(exp(x, z), y).-instance Eq Term where-    (V x) == (V y) = x == y-    (F "exp" [F "exp" [x, y], z]) == (F "exp" [F "exp" [x', y'], z']) =-         x == x' && y == y' && z == z' ||-         x == x' && y == z' && z == y'-    (F sym ts) == (F sym' ts') = sym == sym' && ts == ts'-    _ == _ = False---- SUBSTITUTIONS---- A substitution is a map from variables to terms-type Subst = [(Var, Term)]---- Apply a substitution to a term-subst :: Subst -> Term -> Term-subst s (V x) =-    case chase s (V x) of-      V y -> V y-      t -> subst s t-subst s (F sym ts) =-    F sym (map (subst s) ts)---- A substitution may contain an equivalence class of variables.  The--- chase function finds the canonical representitive of the--- equivalence class.-chase :: Subst -> Term -> Term-chase s (V x) =-    case lookup x s of-      Nothing -> V x-      Just t -> chase s t-chase _ t = t---- UNIFICATION---- This is the entry point-unify :: Term -> Term -> [Subst]-unify t t' =-    unify0 t t' []---- Chase variables to start unifying two terms-unify0 :: Term -> Term -> Subst -> [Subst]-unify0 t t' s =-    unify1 (chase s t) (chase s t') s---- Unification by case analysis-unify1 :: Term -> Term -> Subst -> [Subst]-unify1 (V x) (V y) s            -- Unify two variables-    | x == y = [s]              -- Nothing to do-    | x < y = [(y, V x) : s]    -- Substitute larger variable-    | otherwise = [(x, V y) : s] -- in preference to a smaller one-unify1 (V x) t s-    | occurs x t = []           -- Fail when x is in t-    | otherwise = [(x, t) : s]-unify1 t t'@(V _) s =-    unify1 t' t s--- Unify using the Diffie-Hellman equation.--- To make unification tractable, one makes use of the equation--- exp(exp(gen(), x), y) = exp(exp(gen(), y), x).-unify1 (F "exp" ts@[u, v]) (F "exp" ts'@[u', v']) s =-    unifyList ts ts' s ++     -- Ordinary unification-    -- Add an instances of the equation, and unify on both sides-    do-      s' <- unifyList ts left s-      unifyList ts' right s'-    where-      -- Generate a fresh variable by looking at the variables in use-      var = nextVar ([u, v,  u', v'] ++ terms s) -- Include  substitution-      var' = var + 1                -- Generate another variable-      left = [F "exp" [F "gen" [], V var], V var'] -- One side of equation-      right = [F "exp" [F "gen" [], V var'], V var] -- And the other-unify1 (F sym ts) (F sym' ts') s -- Unify ordinary compound terms-    | sym /= sym' = []           -- Fail on symbol clash-    | otherwise = unifyList ts ts' s--unifyList :: [Term] -> [Term] -> Subst -> [Subst]-unifyList [] [] s = [s]-unifyList (t:ts) (t':ts') s =-    do-      s <- unify0 t t' s-      unifyList ts ts' s-unifyList _ _ _ = []---- Find next unused variable in a list of terms-nextVar :: [Term] -> Var-nextVar [] = 0-nextVar ts =-    maximum (map nextVariable ts)-    where-      nextVariable (V x) = x + 1-      nextVariable (F _ ts) = nextVar ts---- Returns the terms in a substitution.-terms :: Subst -> [Term]-terms s =-    [ t' |-      (x, t) <- s,-      t' <- [V x, t] ]---- Does variable x occur in term t?-occurs :: Var -> Term -> Bool-occurs x (V y) = x == y-occurs x (F _ ts) = any (occurs x) ts---- MATCHING---- This is the entry point-match :: Term -> Term -> [Subst]-match t t' =-    match0 t t' []---- Matching by case analysis-match0 :: Term -> Term -> Subst -> [Subst]-match0 (V x) t s =-    case lookup x s of-      Nothing -> [(x, t) : s]-      Just t' -> if t == t' then [s] else []--- Match using the Diffie-Hellman equation-match0 (F "exp" [x, y]) (F "exp" [F "exp" [x', y'], z']) s =-    matchList [x, y] [F "exp" [x', y'], z'] s ++-    matchList [x, y] [F "exp" [x', z'], y'] s-match0 (F sym ts) (F sym' ts') s-    | sym /= sym' = []-    | otherwise = matchList ts ts' s-match0 _ _ _ = []--matchList :: [Term] -> [Term] -> Subst -> [Subst]-matchList [] [] s = [s]-matchList (t:ts) (t':ts') s =-    do-      s <- match0 t t' s-      matchList ts ts' s-matchList _ _ _ = []---- TERM ORDERING--instance Ord Term where-    compare (V x) (V y) = compare x y-    compare (F "exp" [F "exp" [x, y], z])-            (F "exp" [F "exp" [x', y'], z']) =-        case (compare y z, compare y' z') of-          (GT, GT) -> compare [F "exp" [x, z], y] [F "exp" [x', z'], y']-          (GT, _) -> compare [F "exp" [x, z], y] [F "exp" [x', y'], z']-          (_, GT) -> compare [F "exp" [x, y], z] [F "exp" [x', z'], y']-          _ -> compare [F "exp" [x, y], z] [F "exp" [x', y'], z']-    compare (F sym ts) (F sym' ts') =-        case compare sym sym' of-          EQ -> compare ts ts'-          c -> c-    compare (V _) (F _ _) = LT-    compare (F _ _) (V _) = GT---- TERM INPUT--instance Read Term where-    readsPrec _ s =-        readTerm s-        where-          readTerm s =-              [(V $ read (c:cs), t) | (c:cs, t) <- lex s,-                                      isDigit c] ++-              [(F (c:cs) ts, v)     | (c:cs, t) <- lex s,-                                      isAlpha c,-                                      ("(", u) <- lex t,-                                      (ts, v) <- readArgs u]-          readArgs s =-              [([], t)              | (")", t) <- lex s] ++-              [(x:xs, u)            | (x, t) <- reads s,-                                      (xs, u) <- readRest t]-          readRest s =-              [([], t)              | (")", t) <- lex s] ++-              [(x:xs, v)            | (",", t) <- lex s,-                                      (x, u) <- reads t,-                                      (xs, v) <- readRest u]---- TERM OUTPUT--instance Show Term where-    showsPrec _ (V x) =-        shows x-    showsPrec _ (F sym ts) =-        showString sym . showChar '(' . showArgs ts-        where-          showArgs [] = showChar ')'-          showArgs (x:xs) = shows x . showRest xs-          showRest [] = showChar ')'-          showRest (x:xs) = showChar ',' . shows x . showRest xs
doc/bcasyntax.tex view
@@ -48,6 +48,7 @@ \\ &$\mid$&$(\sym{enc}\mbox{ term+ term})\mid(\sym{hash}\mbox{ term+})$ \\ role-alist&$\leftarrow$&$ (\sym{non-orig}\mbox{ ht-term}\ast)\mbox{ role-alist}$+\\ &$\mid$&$(\sym{pen-non-orig}\mbox{ ht-term}\ast)\mbox{ role-alist}$ \\ &$\mid$&$(\sym{uniq-orig}\mbox{ term}\ast)\mbox{ role-alist}\mid\ldots$ \\ ht-term&$\leftarrow$&term${}\mid{}$(integer term) \\ prot-alist&$\leftarrow$&$\ldots$@@ -60,6 +61,7 @@ \\ maplet&$\leftarrow$& (term term) \\ skel-alist&$\leftarrow$&$(\sym{non-orig}\mbox{ term}\ast)\mbox{ skel-alist}$+\\ &$\mid$&$(\sym{pen-non-orig}\mbox{ term}\ast)\mbox{ skel-alist}$ \\ &$\mid$&$(\sym{uniq-orig}\mbox{ term}\ast)\mbox{ skel-alist}$ \\ &$\mid$&$(\sym{precedes}\mbox{ node-pair}\ast)\mbox{ skel-alist}\mid\ldots$ \\ node-pair&$\leftarrow$&
doc/cpsadesign.pdf view

binary file changed (203125 → 203159 bytes)

+ doc/cpsadha.pdf view

binary file changed (absent → 129997 bytes)

+ doc/cpsadha.tex view
@@ -0,0 +1,477 @@+\documentclass[12pt]{article}+\usepackage{url}+\usepackage{amssymb}+\usepackage{amsmath}+\input{macros}++\title{Simple Diffie-Hellman Algebra}+\author{John D. Ramsdell\\+  The MITRE Corporation\\ CPSA Version \version}++\hyphenation{pre-skel-e-ton}+\hyphenation{pro-to-skel-e-ton}+\hyphenation{pro-to-role}++\newcommand{\sdha}{\textsc{sdha}}+\newcommand{\gen}{\ensuremath{\cn{g}}}+\newcommand{\svars}{\fn{Vars}}+\newcommand{\sdom}{\fn{Dom}}+\newcommand{\sran}{\fn{Ran}}+\newcommand{\alga}{\alg{A}}+\newcommand{\base}{\ensuremath{\mathfrak B}}+\newcommand{\carpos}{\fn{carpos}}+\newcommand{\tr}{\ensuremath{\mathfrak C}}+\newcommand{\evt}{\fn{evt}}+\newcommand{\mesg}{\fn{mesg}}+\newcommand{\role}{\mathsf{r}}+\newcommand{\rl}{\fn{rl}}+\newcommand{\skel}{\mathsf{k}}+\newcommand{\nodes}{\fn{nodes}}+\newcommand{\lsn}{\fn{lsn}}+\newcommand{\pubmsg}{\mathbf{P}}+\newcommand{\excl}{\mathbf{X}}+\newcommand{\transpred}{\mathbf{T}}+\newcommand{\init}{\fn{init}}+\newcommand{\resp}{\fn{resp}}++\begin{document}+\maketitle+\cpsacopying++A natural way to model protocols that use Diffie-Hellman is with an+algebra that includes a sort for exponents, one with members that form+an Abelian group.  Implementation experiments have shown that it is+difficult to implement such an algebra within the current {\cpsa}+framework without significant revisions to {\cpsa}.++This paper describes a simple Diffie-Hellman algebra in which the+exponent is not an Abelian group.  Instead, the algebra only captures+the commutative law of exponents.  The algebra requires few changes to+the basic formalism used by {\cpsa}~\cite{cpsaspec09}.  An atom that+originates in a trace need not be carried as long as it is in an+exponent of something carried.  Similarly, in a skeleton, an atom+assumed to be uniquely originating need not be carried as long as it+is in an exponent of something carried. (See Section~\ref{sec:strand+  spaces}).++The trade-off for ease of implementation is a loss of coverage.+Protocols that make use of the associativity or the inverses of+exponents cannot be correctly analyzed using this algebra.  In+particular, group Diffie-Hellman protocols typically cannot be+handled.  {\cpsa} with the simple Diffie-Hellman algebra can analyze+restricted Diffie-Hellman protocols, such as the basic Diffie-Hellman+Key Exchange Protocol.  This protocol serves as an example in this+paper.++$$\begin{array}{r@{{}:{}}l}+A\to B&\enc{\mbox{``i''}, \gen^x}{a^{-1}}\\+B\to A&(\enc{\gen^y}{b^{-1}}, \enc{a, b}{\gen^{xy}})\\+A\to B&\enc{\mbox{``i''}, a, b}{\gen^{xy}}+\end{array}$$+Alice~($A$) freshly generates an exponent~$x$, signs the exponentiated+value with her private uncompromised asymmetric key $a^{-1}$, and+sends it to Bob~($B$).  Bob freshly generates an exponent~$y$, signs+the exponentiated value with his private uncompromised asymmetric key+$b^{-1}$, and sends it to Alice along with the public signing keys+encrypted with the newly generated symmetric key~$\gen^{xy}$.  Alice+confirms the symmetric key by signing the public keys too.  Alice+ensures her messages cannot be confused with Bob's by adding the tag+constant ``i'' within her signed data.++\begin{figure}+\begingroup\footnotesize+\begin{verbatim}+(herald "Diffie-Hellman Key Exchange" (algebra diffie-hellman))++(defprotocol dhke diffie-hellman+  (defrole init (vars (a b akey) (x y expn))+    (trace+     (send (enc "i" (exp (gen) x) (invk a)))+     (recv (cat (enc (exp (gen) y) (invk b))+                (enc a b (exp (exp (gen) y) x))))+     (send (enc "i" a b (exp (exp (gen) y) x))))+    (uniq-orig  x))+  (defrole resp (vars (a b akey) (x y expn))+    (trace+     (recv (enc "i" (exp (gen) x) (invk a)))+     (send (cat (enc (exp (gen) y) (invk b))+                (enc a b (exp (exp (gen) x) y))))+     (recv (enc "i" a b (exp (exp (gen) x) y))))+    (uniq-orig y)))++(defskeleton dhke (vars (a b akey))+  (defstrand resp 3 (a a) (b b))+  (non-orig (invk a) (invk b)))++ (defskeleton dhke (vars (a b akey))+   (defstrand init 2 (a a) (b b))+   (non-orig (invk a) (invk b)))+\end{verbatim}+\endgroup+\caption{Diffie-Hellman Key Exchange {\cpsa} Input}\label{fig:dhke}+\end{figure}++The protocol in {\cpsa} syntax is presented in Figure~\ref{fig:dhke}.+{\cpsa} concludes there is key agreement from the perspective of both+Alice and Bob using this input.  Notice that $\gen^{xy}$ is written+\texttt{(exp (exp (gen) x) y)}.  There is no multiplication is this+algebra, and $\gen^{xy}$ is more accurately written as $(\gen^x)^y$.++\section{Order-Sorted Message Algebra}\label{sec:order-sorted mesg algs}++{\cpsa} models a message as an equivalence class of terms over a+signature.  In particular, {\cpsa} uses order-sorted quotient term+algebras~\cite{GoguenMeseguer92} for message algebras.  This formalism+enables the use of well-known algorithms for unification and matching+in the presence of equations~\cite[Chapter~8]{RobinsonVoronkov01}+while providing a sort system for classifying messages.++{\cpsa} provides a Diffie-Hellman algebra that extends the Basic+Crypto Algebra with two new sorts, \texttt{base} and \texttt{expn},+and two new operations, \texttt{(gen)}, a constant of sort+\texttt{base} for exponentiation, and \texttt{(exp $G$ $X$)}, the+exponentiation operation~\cite{cpsauser09}.++\begin{figure}+$$\begin{array}{ll@{{}\colon{}}ll}+\mbox{Sorts:}&\multicolumn{3}{l}{\mbox{$\top$, \srt{D}, \srt{A}, \srt{S}, and \srt{E}}}\\+\mbox{Subsorts:}&\multicolumn{3}{l}{\mbox{$\srt{D}<\top$,+$\srt{A}<\top$, $\srt{S}<\top$, and $\srt{E}<\top$}}\\+\mbox{Base Sorts:}&\multicolumn{3}{l}{\mbox{\srt{D}, \srt{A}, and \srt{E} (\srt{S} and+$\top$ omitted)}}\\+\mbox{Operations:}&(\cdot,\cdot)&\top\times\top\to\top& \mbox{Pairing}\\+&\enc{\cdot}{(\cdot)}&\top\times\srt{S}\to\top& \mbox{Symmetric encryption}\\+&\enc{\cdot}{(\cdot)}&\top\times\srt{A}\to\top& \mbox{Asymmetric encryption}\\+&\mbox{``\ldots''}&\top&\mbox{Tag constants}\\+&(\cdot)^{-1}&\srt{S}\to\srt{S}& \mbox{Symmetric key inverse}\\+&(\cdot)^{-1}&\srt{A}\to\srt{A}& \mbox{Asymmetric key inverse}\\+&\gen&\srt{S}&\mbox{Generator}\\+&{(\cdot)}^{(\cdot)}&\srt{S}\times\srt{E}\to\srt{S}&\mbox{Exponentiation}\\+\mbox{Equations:}&\multicolumn{3}{l}{(a^{-1})^{-1}\approx a\qquad+  s^{-1}\approx s\qquad (h^x)^y\approx (h^y)^x}\\+&\multicolumn{3}{l}{\mbox{where $a\colon\srt{A}$, $s,h\colon\srt{S}$, and $x,y\colon\srt{E}$}}+\end{array}$$+\caption{Simple Diffie-Hellman Algebra Signature and+  Equations}\label{fig:dh signature}+\end{figure}++This paper presents a very simple message algebra for analyzing+protocols using Diffie-Hellman, called the Simple Diffie-Hellman+Algebra (\sdha), that suffices for this document.  There are five+{\sdha} sorts: $\top$, the sort of all messages, and sorts for+data~(\srt{D}), asymmetric keys~(\srt{A}), symmetric keys~(\srt{S}),+and exponents~(\srt{E}).  Every symmetric key is a message (written+$\srt{S}<\top$), and so forth for the other non-$\top$ sorts.  The+operations used to form terms are given by the signature in+Figure~\ref{fig:dh signature}.  Notice that the encryption and key+inverse operations are overloaded.++There are two equations in {\sdha} associated with key inverse.  For+asymmetric key $a\colon\srt{A}$, $(a^{-1})^{-1}\approx a$, and for+symmetric key $s\colon\srt{S}$, $s^{-1}\approx s$.  The equation for+exponentiation is $(h^x)^y\approx (h^y)^x$, where $h\colon\srt{S}$ and+$x,y\colon\srt{E}$.  Unification and matching in this algebra produce a+finite number of most general unifiers, that is, the unification type+is finitary.  For example, $\{x\mapsto u,y\mapsto v\}$ and $\{x\mapsto+\gen^v,u\mapsto \gen^y\}$ unify $x^y$ and $u^v$.  Unification is+finitary because of an approximation.  To unify $a^{xy}$ and~$b^{wz}$,+we unify $a^{xy}$ with~$\gen^{uv}$ and $\gen^{vu}$ with~$b^{wz}$,+where~$u$ and~$v$ are freshly generated variables.  In other words,+for the purpose of unification only, the equation for exponentiation+is $(\gen^x)^y\approx (\gen^y)^x$.  Expository Haskell code for+unification and matching with just the equation for exponentiation is+presented in Appendix~\ref{sec:haskell}.++Origination assumption in roles and skeletons can only be applied to a+subset of the messages of an algebra---the atoms.  In {\sdha},+asymmetric keys and exponents are atoms, but symmetric keys are not.+(Similarly, in the implemented Diffie-Hellman algebra, messages of+sort \texttt{base} are not atoms.)++A message~$t_0$ is \emph{carried by}~$t_1$, written $t_0\sqsubseteq+t_1$ if~$t_0$ can be derived from~$t_1$ given the right set of keys,+that is $\sqsubseteq$ is the smallest reflexive, transitive relation+such that $t_0\sqsubseteq t_0$, $t_0\sqsubseteq (t_0, t_1)$,+$t_1\sqsubseteq (t_0, t_1)$, and $t_0\sqsubseteq\enc{t_0}{t_1}$.++The introduction of the Diffie-Hellman algebra requires a new relation+on messages.  A message~$t_0$ is \emph{held by}~$t_1$, written+$t_0\preceq t_1$ iff $t_1$ carries $t_0$ or $t_1$ is in the exponent+of a carried term.  That is $\preceq$ is the smallest reflexive,+transitive relation such that $t_0\preceq t_0$, $t_0\preceq (t_0,+t_1)$, $t_1\preceq (t_0, t_1)$, $t_0\preceq\enc{t_0}{t_1}$,+$t_1\preceq t_0^{t_1}$.++\section{Strand Spaces}\label{sec:strand spaces}++A run of a protocol is viewed as an exchange of messages by a finite+set of local sessions of the protocol.  Each local session is called a+\emph{strand}~\cite{ThayerEtal99}.  The behavior of a strand, its+\emph{trace}, is a non-empty sequence of messaging events.  An+\emph{event} is either a message transmission or a reception.  In the+Basic Crypto Algebra, a message originates in a trace if it is carried+by some event and the first event in which it is carried is a+transmission.  For Diffie-Hellman, a message \emph{originates} in a+trace if it is held by some event and the first event in which it is+held is a transmission.++A similar change was made for skeletons.  An atom assumed to be+uniquely originating need only be held by some term within a skeleton,+it no longer must be carried.++\section{Derivable Messages}\label{sec:pen deriv mesgs}++Suppose~$T$ is a set of messages.  Let $\to$ be a reduction relation+on sets of messages defined as follows:+$$\begin{array}{r@{{}\to{}}ll}+\{(t_0,t_1)\}\cup T&\{t_0,t_1\}\cup T\\+\{\enc{t_0}{t_1}\}\cup T&\{t_0,\enc{t_0}{t_1}\}\cup T+&\mbox{if $t_1^{-1}\in D(T)$ and $t_0\notin T$}+\end{array}$$+The minimum decryption set~$M(T)$ is the normal form of relation~$\to$,+i.e.\ $T\to^\ast M(T)$ and there is no~$T'$ such that $M(T)\to T'$.++A message~$t$ is \emph{derivable} from~$T$, iff $t\in D(T)$, where+$$\begin{array}{r@{{}={}}l}+D^0&M(T)\\+D^{n+1}&\left\{\begin{array}{c@{{}\mid{}}l}+(x,y)&x,y\in D^n\\+\enc{x}{y}&x,y\in D^n,y\colon\srt{A}\lor y\colon\srt{S}\\+x^y& x,y\in D^n, x\colon\srt{S}, y\colon\srt{E}+\end{array}\right\}\\+D(T)&\bigcup_{n\in\nat}D^n+\end{array}$$++\section{Conclusion}++In this algebra, one cannot analyze group Diffie-Hellman protocols, as+they make use of the associativity of exponents.  On the other hand,+this algebra appears to allow the analysis of the basic Diffie-Hellman+Key Exchange.  In terms of implementation, allowances have to be made+for the fact that unification may produce more than one most general+unifier.++\bibliography{cpsa}+\bibliographystyle{plain}++\appendix++\section{Unification and Matching in Haskell}\label{sec:haskell}++\begingroup\footnotesize+\begin{verbatim}+-- Unification and matching in a simple Diffie-Hellman algebra++module SimpleDiffieHellman where++-- Equational unification and matching in an algebra with the+-- following equation is used to analyze protocols that make use of+-- the Diffie-Hellman problem.+--+--      exp(exp(x, y), z) = exp(exp(x, z), y)+--+-- The module shows how to perform the unification and matching.++import Char(isDigit, isAlpha)++-- TERMS++-- Variables are just integers so that it is easy to freshly generate+-- them.++type Var = Int++data Term                       -- A term is+    = V Var                     -- a variable, or a+    | F String [Term]           -- function symbol and a list of terms++-- Equality modulo the equation: exp(exp(x, y), z) = exp(exp(x, z), y).+instance Eq Term where+    (V x) == (V y) = x == y+    (F "exp" [F "exp" [x, y], z]) == (F "exp" [F "exp" [x', y'], z']) =+         x == x' && y == y' && z == z' ||+         x == x' && y == z' && z == y'+    (F sym ts) == (F sym' ts') = sym == sym' && ts == ts'+    _ == _ = False++-- SUBSTITUTIONS++-- A substitution is a map from variables to terms+type Subst = [(Var, Term)]++-- Apply a substitution to a term+subst :: Subst -> Term -> Term+subst s (V x) =+    case chase s (V x) of+      V y -> V y+      t -> subst s t+subst s (F sym ts) =+    F sym (map (subst s) ts)++-- A substitution may contain an equivalence class of variables.  The+-- chase function finds the canonical representitive of the+-- equivalence class.+chase :: Subst -> Term -> Term+chase s (V x) =+    case lookup x s of+      Nothing -> V x+      Just t -> chase s t+chase _ t = t++-- UNIFICATION++-- This is the entry point+unify :: Term -> Term -> [Subst]+unify t t' =+    unify0 t t' []++-- Chase variables to start unifying two terms+unify0 :: Term -> Term -> Subst -> [Subst]+unify0 t t' s =+    unify1 (chase s t) (chase s t') s++-- Unification by case analysis+unify1 :: Term -> Term -> Subst -> [Subst]+unify1 (V x) (V y) s            -- Unify two variables+    | x == y = [s]              -- Nothing to do+    | x < y = [(y, V x) : s]    -- Substitute larger variable+    | otherwise = [(x, V y) : s] -- in preference to a smaller one+unify1 (V x) t s+    | occurs x t = []           -- Fail when x is in t+    | otherwise = [(x, t) : s]+unify1 t t'@(V _) s =+    unify1 t' t s+-- Unify using the Diffie-Hellman equation.+-- To make unification tractable, one makes use of the equation+-- exp(exp(gen(), x), y) = exp(exp(gen(), y), x).+unify1 (F "exp" ts@[u, v]) (F "exp" ts'@[u', v']) s =+    unifyList ts ts' s ++     -- Ordinary unification+    -- Add an instances of the equation, and unify on both sides+    do+      s' <- unifyList ts left s+      unifyList ts' right s'+    where+      -- Generate a fresh variable by looking at the variables in use+      var = nextVar ([u, v,  u', v'] ++ terms s) -- Include  substitution+      var' = var + 1                -- Generate another variable+      left = [F "exp" [F "gen" [], V var], V var'] -- One side of equation+      right = [F "exp" [F "gen" [], V var'], V var] -- And the other+unify1 (F sym ts) (F sym' ts') s -- Unify ordinary compound terms+    | sym /= sym' = []           -- Fail on symbol clash+    | otherwise = unifyList ts ts' s++unifyList :: [Term] -> [Term] -> Subst -> [Subst]+unifyList [] [] s = [s]+unifyList (t:ts) (t':ts') s =+    do+      s <- unify0 t t' s+      unifyList ts ts' s+unifyList _ _ _ = []++-- Find next unused variable in a list of terms+nextVar :: [Term] -> Var+nextVar [] = 0+nextVar ts =+    maximum (map nextVariable ts)+    where+      nextVariable (V x) = x + 1+      nextVariable (F _ ts) = nextVar ts++-- Returns the terms in a substitution.+terms :: Subst -> [Term]+terms s =+    [ t' |+      (x, t) <- s,+      t' <- [V x, t] ]++-- Does variable x occur in term t?+occurs :: Var -> Term -> Bool+occurs x (V y) = x == y+occurs x (F _ ts) = any (occurs x) ts++-- MATCHING++-- This is the entry point+match :: Term -> Term -> [Subst]+match t t' =+    match0 t t' []++-- Matching by case analysis+match0 :: Term -> Term -> Subst -> [Subst]+match0 (V x) t s =+    case lookup x s of+      Nothing -> [(x, t) : s]+      Just t' -> if t == t' then [s] else []+-- Match using the Diffie-Hellman equation+match0 (F "exp" [x, y]) (F "exp" [F "exp" [x', y'], z']) s =+    matchList [x, y] [F "exp" [x', y'], z'] s +++    matchList [x, y] [F "exp" [x', z'], y'] s+match0 (F sym ts) (F sym' ts') s+    | sym /= sym' = []+    | otherwise = matchList ts ts' s+match0 _ _ _ = []++matchList :: [Term] -> [Term] -> Subst -> [Subst]+matchList [] [] s = [s]+matchList (t:ts) (t':ts') s =+    do+      s <- match0 t t' s+      matchList ts ts' s+matchList _ _ _ = []++-- TERM ORDERING++instance Ord Term where+    compare (V x) (V y) = compare x y+    compare (F "exp" [F "exp" [x, y], z])+            (F "exp" [F "exp" [x', y'], z']) =+        case (compare y z, compare y' z') of+          (GT, GT) -> compare [F "exp" [x, z], y] [F "exp" [x', z'], y']+          (GT, _) -> compare [F "exp" [x, z], y] [F "exp" [x', y'], z']+          (_, GT) -> compare [F "exp" [x, y], z] [F "exp" [x', z'], y']+          _ -> compare [F "exp" [x, y], z] [F "exp" [x', y'], z']+    compare (F sym ts) (F sym' ts') =+        case compare sym sym' of+          EQ -> compare ts ts'+          c -> c+    compare (V _) (F _ _) = LT+    compare (F _ _) (V _) = GT++-- TERM INPUT++instance Read Term where+    readsPrec _ s =+        readTerm s+        where+          readTerm s =+              [(V $ read (c:cs), t) | (c:cs, t) <- lex s,+                                      isDigit c] +++              [(F (c:cs) ts, v)     | (c:cs, t) <- lex s,+                                      isAlpha c,+                                      ("(", u) <- lex t,+                                      (ts, v) <- readArgs u]+          readArgs s =+              [([], t)              | (")", t) <- lex s] +++              [(x:xs, u)            | (x, t) <- reads s,+                                      (xs, u) <- readRest t]+          readRest s =+              [([], t)              | (")", t) <- lex s] +++              [(x:xs, v)            | (",", t) <- lex s,+                                      (x, u) <- reads t,+                                      (xs, v) <- readRest u]++-- TERM OUTPUT++instance Show Term where+    showsPrec _ (V x) =+        shows x+    showsPrec _ (F sym ts) =+        showString sym . showChar '(' . showArgs ts+        where+          showArgs [] = showChar ')'+          showArgs (x:xs) = shows x . showRest xs+          showRest [] = showChar ')'+          showRest (x:xs) = showChar ',' . shows x . showRest xs+\end{verbatim}+\endgroup+\end{document}
doc/cpsaoverview.pdf view

binary file changed (75613 → 76120 bytes)

doc/cpsaoverview.tex view
@@ -70,6 +70,7 @@ (defrole \nterm{sym} (vars \nterms{decl}) \quad (trace \ntermp{event}) \quad \ntermo{(non-orig \nterms{non})}+\quad \ntermo{(pen-non-orig \nterms{non})} \quad \ntermo{(uniq-orig \nterms{atom})} \quad \nterm{annos}) @@ -118,13 +119,14 @@ a role assumes atom~$a$ is uniquely originating using the \texttt{uniq-orig} form, applying the substitution \texttt{(\nterms{maplet})} to $a$ produces an inherited uniquely-originating atom.  Role atoms assumed to be non-originating using the-\texttt{non-orig} form are inherited similarly.  For a non-originating-assumption, a strand height may be associated with an atom.  In this-case, a non-originating assumption is inherited by strands that meet-or exceed the height constraint.  Note that the definition of a-uniquely originating atom and a non-originating atom in an execution-is still to come.+originating atom.  A role atom assumed to be non-originating using the+\texttt{non-orig} or \texttt{pen-non-orig} form is inherited+similarly.  For a non-originating assumption, a strand height may be+associated with an atom.  In this case, a non-originating assumption+is inherited by strands that meet or exceed the height constraint.+Note that the definition of a uniquely originating atom and a+non-originating atom in an execution is still to come.  Also, the two+flavors of non-origination assumptions have yet to be described.  A strand in an execution is identified by a natural number.  To describe an execution, the behavior of each participant is listed@@ -182,6 +184,12 @@ adversary---compromised keys---have always been transmitted by some strand. The basic adversary roles are built into CPSA. +A \emph{penetrator non-originating atom} may be carried, and it or its+inverse must occur in some trace.  The inherited penetrator+non-origination atoms must satisfy this property too.  A penetrator+non-originating assumption asserts that the adversary is not allowed+to originate the atom.+ \section{Skeletons}  CPSA never directly represents adversarial behavior.  Instead, a@@ -194,6 +202,7 @@ \quad \ntermp{defstrand} \quad \ntermo{(precedes \nterms{pair})} \quad \ntermo{(non-orig \nterms{atom})}+\quad \ntermo{(pen-non-orig \nterms{atom})} \quad \ntermo{(uniq-orig \nterms{atom})}) \end{alltt} \end{quote}@@ -207,15 +216,17 @@ precedes the reception reception event, as an execution it represents may include events in between. -The final two additional components of a skeleton are a set of-non-originating atoms, and a set of uniquely originating atoms.  To be-a skeleton, each uniquely originating atom must originate in at-most one strand in the skeleton, and each non-originating atom must-never be carried by some event in the skeleton and every-variable that occurs in the atom must occur in some event.-Furthermore, for each uniquely originating atom that originates in the-skeleton, the node relation must ensure that reception nodes that-carry the atom follow the node of its origination.+The final three additional components of a skeleton are a set of+non-originating atoms, a set of penetrator non-originating atoms, and+a set of uniquely originating atoms.  To be a skeleton, each uniquely+originating atom must originate in at most one strand in the skeleton,+and each non-originating atom must never be carried by some event in+the skeleton and every variable that occurs in the atom must occur in+some event, and every variable that occurs in each penetrator+non-originating atom must occur in some event.  Furthermore, for each+uniquely originating atom that originates in the skeleton, the node+relation must ensure that reception nodes that carry the atom follow+the node of its origination.  One special skeleton is associated with each execution.  It summarizes the regular behavior of the execution.  It is derived from the
doc/cpsaprimer.pdf view

binary file changed (186027 → 187383 bytes)

doc/cpsaprimer.tex view
@@ -299,17 +299,20 @@ \emph{acquired}\index{acquired} by a trace if it first occurs in an inbound term and is also carried by that term. -Some atoms in a role have special properties.  An atom may be-declared to be non-originating with the \texttt{non-orig} form and-uniquely originating with the \texttt{uniq-orig} form.  The-declarations make assertions about instances of a role, assertions-that will be defined after role instantiation is explained.+Some atoms in a role have special properties.  An atom may be declared+to be non-originating with the \texttt{non-orig} form or the+\texttt{pen-non-orig} form and uniquely originating with the+\texttt{uniq-orig} form.  The declarations make assertions about+instances of a role, assertions that will be defined after role+instantiation is explained.  Every variable that occurs in each term declared to be non-originating must occur in some term in the trace, and the term must not be carried-by any term in the trace.  Each term declared to be-uniquely originating must originate in the trace.  Each variable of-sort \fn{mesg} must be acquired in the trace.+by any term in the trace.  Every variable that occurs in each term+declared to be penetrator non-originating must occur in some term in+the trace, but the term may be carried by some term in a trace.  Each+term declared to be uniquely originating must originate in the trace.+Each variable of sort \fn{mesg} must be acquired in the trace.  \section{Executions} @@ -450,6 +453,10 @@ encryption in some message.  Each non-originating term is a key that is not compromised, as the penetrator has no access to the key. +A \index{penetrator non-origination}\emph{penetrator non-originating+  term} is an atom that is forbidden from being originated on a+penetrator strand in an execution.+ A \index{unique origination}\emph{uniquely originating term} is an atom that originates on exactly one strand in the execution.  The correct behavior of some protocols depends on the fact that its@@ -469,9 +476,10 @@ The mapping of a non-originating role term can be conditioned on the height of the instance.  A role non-origination assumption of the form \texttt{(3 a)} asserts that \texttt{a} will not be mapped into an-instance unless its height is at least three.-Section~\ref{sec:advice} provides advice on when to add-non-origination or unique origination assumptions to roles.+instance unless its height is at least three.  Penetrator+non-originating atoms are similar.  Section~\ref{sec:advice} provides+advice on when to add non-origination or unique origination+assumptions to roles.  \begin{figure} \begin{center}@@ -494,12 +502,14 @@ reception node, as an execution it represents may include nodes between the related transmission and reception nodes. -The final two additional components of a skeleton are a set of-non-originating terms, and a set of uniquely originating terms.  To be-a skeleton, each uniquely originating term must originate in at most-one strand in the skeleton, and each non-originating term must never-be carried by some event in the skeleton and every variable-that occurs in the term must occur in some event.+The final three additional components of a skeleton are a set of+non-originating terms, a set of penetrator non-originating terms, and+a set of uniquely originating terms.  To be a skeleton, each uniquely+originating term must originate in at most one strand in the skeleton,+and each non-originating term must never be carried by some event in+the skeleton and every variable that occurs in the term must occur in+some event.  For a penetrator non-originating term, is suffices that+every variable that occurs in the term must occur in some event. Furthermore, for each uniquely originating term that originates in the skeleton, the node relation must ensure that reception nodes that carry the term follow the node of its origination.@@ -513,6 +523,7 @@    \ldots                ; Instance sequence    (precedes \ldots)     ; Node orderings    (non-orig \ldots)     ; Non-originating terms+   (pen-non-orig \ldots) ; Penetrator non-originating terms    (uniq-orig \ldots))   ; Uniquely originating terms \end{alltt} \end{quote}@@ -576,7 +587,8 @@ uniquely originating terms of~$B$ is a subset of the ones in~$A$, the set of non-originating terms of~$B$ is a subset of the ones in~$A$, and a uniquely originating term that originates in~$B$ originates at-the corresponding node in~$A$.+the corresponding node in~$A$.  Penetrator non-originating assumptions+are similar to non-originating assumptions.  A skeleton~$A$ message refines~$B$ if~$A$ and~$B$ agree on all but the terms in the range of each strand's environment and its@@ -785,9 +797,9 @@ overlap.  Furthermore, the maplets used to specify a strand need not specify how to map every role variable.  The reader inserts missing mappings, and renames every skeleton variable that also occurs in a-role of its protocol.  The sort of every skeleton variable that-occurs in the \texttt{non-orig} or \texttt{uniq-orig} list or in a-maplet must be declared, using the \texttt{vars} form.+role of its protocol.  The sort of every skeleton variable that occurs+in the \texttt{non-orig}, \texttt{pen-non-orig}, or \texttt{uniq-orig}+list or in a maplet must be declared, using the \texttt{vars} form.  The \textsc{prot-alist}, \textsc{role-alist}, and \textsc{skel-alist} productions are Lisp style association lists, that is, lists of
− doc/cpsasdha.pdf

binary file changed (130006 → absent bytes)

− doc/cpsasdha.tex 
@@ -1,477 +0,0 @@-\documentclass[12pt]{article}-\usepackage{url}-\usepackage{amssymb}-\usepackage{amsmath}-\input{macros}--\title{Simple Diffie-Hellman Algebra}-\author{John D. Ramsdell\\-  The MITRE Corporation\\ CPSA Version \version}--\hyphenation{pre-skel-e-ton}-\hyphenation{pro-to-skel-e-ton}-\hyphenation{pro-to-role}--\newcommand{\sdha}{\textsc{sdha}}-\newcommand{\gen}{\ensuremath{\cn{g}}}-\newcommand{\svars}{\fn{Vars}}-\newcommand{\sdom}{\fn{Dom}}-\newcommand{\sran}{\fn{Ran}}-\newcommand{\alga}{\alg{A}}-\newcommand{\base}{\ensuremath{\mathfrak B}}-\newcommand{\carpos}{\fn{carpos}}-\newcommand{\tr}{\ensuremath{\mathfrak C}}-\newcommand{\evt}{\fn{evt}}-\newcommand{\mesg}{\fn{mesg}}-\newcommand{\role}{\mathsf{r}}-\newcommand{\rl}{\fn{rl}}-\newcommand{\skel}{\mathsf{k}}-\newcommand{\nodes}{\fn{nodes}}-\newcommand{\lsn}{\fn{lsn}}-\newcommand{\pubmsg}{\mathbf{P}}-\newcommand{\excl}{\mathbf{X}}-\newcommand{\transpred}{\mathbf{T}}-\newcommand{\init}{\fn{init}}-\newcommand{\resp}{\fn{resp}}--\begin{document}-\maketitle-\cpsacopying--A natural way to model protocols that use Diffie-Hellman is with an-algebra that includes a sort for exponents, one with members that form-an Abelian group.  Implementation experiments have shown that it is-difficult to implement such an algebra within the current {\cpsa}-framework without significant revisions to {\cpsa}.--This paper describes a simple Diffie-Hellman algebra in which the-exponent is not an Abelian group.  Instead, the algebra only captures-the commutative law of exponents.  The algebra requires few changes to-the basic formalism used by {\cpsa}~\cite{cpsaspec09}.  An atom that-originates in a trace need not be carried as long as it is in an-exponent of something carried.  Similarly, in a skeleton, an atom-assumed to be uniquely originating need not be carried as long as it-is in an exponent of something carried. (See Section~\ref{sec:strand-  spaces}).--The trade-off for ease of implementation is a loss of coverage.-Protocols that make use of the associativity or the inverses of-exponents cannot be correctly analyzed using this algebra.  In-particular, group Diffie-Hellman protocols typically cannot be-handled.  {\cpsa} with the simple Diffie-Hellman algebra can analyze-restricted Diffie-Hellman protocols, such as the basic Diffie-Hellman-Key Exchange Protocol.  This protocol serves as an example in this-paper.--$$\begin{array}{r@{{}:{}}l}-A\to B&\enc{\mbox{``i''}, \gen^x}{a^{-1}}\\-B\to A&(\enc{\gen^y}{b^{-1}}, \enc{a, b}{\gen^{xy}})\\-A\to B&\enc{\mbox{``i''}, a, b}{\gen^{xy}}-\end{array}$$-Alice~($A$) freshly generates an exponent~$x$, signs the exponentiated-value with her private uncompromised asymmetric key $a^{-1}$, and-sends it to Bob~($B$).  Bob freshly generates an exponent~$y$, signs-the exponentiated value with his private uncompromised asymmetric key-$b^{-1}$, and sends it to Alice along with the public signing keys-encrypted with the newly generated symmetric key~$\gen^{xy}$.  Alice-confirms the symmetric key by signing the public keys too.  Alice-ensures her messages cannot be confused with Bob's by adding the tag-constant ``i'' within her signed data.--\begin{figure}-\begingroup\footnotesize-\begin{verbatim}-(herald "Diffie-Hellman Key Exchange" (algebra diffie-hellman))--(defprotocol dhke diffie-hellman-  (defrole init (vars (a b akey) (x y expn))-    (trace-     (send (enc "i" (exp (gen) x) (invk a)))-     (recv (cat (enc (exp (gen) y) (invk b))-                (enc a b (exp (exp (gen) y) x))))-     (send (enc "i" a b (exp (exp (gen) y) x))))-    (uniq-orig  x))-  (defrole resp (vars (a b akey) (x y expn))-    (trace-     (recv (enc "i" (exp (gen) x) (invk a)))-     (send (cat (enc (exp (gen) y) (invk b))-                (enc a b (exp (exp (gen) x) y))))-     (recv (enc "i" a b (exp (exp (gen) x) y))))-    (uniq-orig y)))--(defskeleton dhke (vars (a b akey))-  (defstrand resp 3 (a a) (b b))-  (non-orig (invk a) (invk b)))-- (defskeleton dhke (vars (a b akey))-   (defstrand init 2 (a a) (b b))-   (non-orig (invk a) (invk b)))-\end{verbatim}-\endgroup-\caption{Diffie-Hellman Key Exchange {\cpsa} Input}\label{fig:dhke}-\end{figure}--The protocol in {\cpsa} syntax is presented in Figure~\ref{fig:dhke}.-{\cpsa} concludes there is key agreement from the perspective of both-Alice and Bob using this input.  Notice that $\gen^{xy}$ is written-\texttt{(exp (exp (gen) x) y)}.  There is no multiplication is this-algebra, and $\gen^{xy}$ is more accurately written as $(\gen^x)^y$.--\section{Order-Sorted Message Algebra}\label{sec:order-sorted mesg algs}--{\cpsa} models a message as an equivalence class of terms over a-signature.  In particular, {\cpsa} uses order-sorted quotient term-algebras~\cite{GoguenMeseguer92} for message algebras.  This formalism-enables the use of well-known algorithms for unification and matching-in the presence of equations~\cite[Chapter~8]{RobinsonVoronkov01}-while providing a sort system for classifying messages.--{\cpsa} provides a Diffie-Hellman algebra that extends the Basic-Crypto Algebra with two new sorts, \texttt{base} and \texttt{expn},-and two new operations, \texttt{(gen)}, a constant of sort-\texttt{base} for exponentiation, and \texttt{(exp $G$ $X$)}, the-exponentiation operation~\cite{cpsauser09}.--\begin{figure}-$$\begin{array}{ll@{{}\colon{}}ll}-\mbox{Sorts:}&\multicolumn{3}{l}{\mbox{$\top$, \srt{D}, \srt{A}, \srt{S}, and \srt{E}}}\\-\mbox{Subsorts:}&\multicolumn{3}{l}{\mbox{$\srt{D}<\top$,-$\srt{A}<\top$, $\srt{S}<\top$, and $\srt{E}<\top$}}\\-\mbox{Base Sorts:}&\multicolumn{3}{l}{\mbox{\srt{D}, \srt{A}, and \srt{E} (\srt{S} and-$\top$ omitted)}}\\-\mbox{Operations:}&(\cdot,\cdot)&\top\times\top\to\top& \mbox{Pairing}\\-&\enc{\cdot}{(\cdot)}&\top\times\srt{S}\to\top& \mbox{Symmetric encryption}\\-&\enc{\cdot}{(\cdot)}&\top\times\srt{A}\to\top& \mbox{Asymmetric encryption}\\-&\mbox{``\ldots''}&\top&\mbox{Tag constants}\\-&(\cdot)^{-1}&\srt{S}\to\srt{S}& \mbox{Symmetric key inverse}\\-&(\cdot)^{-1}&\srt{A}\to\srt{A}& \mbox{Asymmetric key inverse}\\-&\gen&\srt{S}&\mbox{Generator}\\-&{(\cdot)}^{(\cdot)}&\srt{S}\times\srt{E}\to\srt{S}&\mbox{Exponentiation}\\-\mbox{Equations:}&\multicolumn{3}{l}{(a^{-1})^{-1}\approx a\qquad-  s^{-1}\approx s\qquad (h^x)^y\approx (h^y)^x}\\-&\multicolumn{3}{l}{\mbox{where $a\colon\srt{A}$, $s,h\colon\srt{S}$, and $x,y\colon\srt{E}$}}-\end{array}$$-\caption{Simple Diffie-Hellman Algebra Signature and-  Equations}\label{fig:dh signature}-\end{figure}--This paper presents a very simple message algebra for analyzing-protocols using Diffie-Hellman, called the Simple Diffie-Hellman-Algebra (\sdha), that suffices for this document.  There are five-{\sdha} sorts: $\top$, the sort of all messages, and sorts for-data~(\srt{D}), asymmetric keys~(\srt{A}), symmetric keys~(\srt{S}),-and exponents~(\srt{E}).  Every symmetric key is a message (written-$\srt{S}<\top$), and so forth for the other non-$\top$ sorts.  The-operations used to form terms are given by the signature in-Figure~\ref{fig:dh signature}.  Notice that the encryption and key-inverse operations are overloaded.--There are two equations in {\sdha} associated with key inverse.  For-asymmetric key $a\colon\srt{A}$, $(a^{-1})^{-1}\approx a$, and for-symmetric key $s\colon\srt{S}$, $s^{-1}\approx s$.  The equation for-exponentiation is $(h^x)^y\approx (h^y)^x$, where $h\colon\srt{S}$ and-$x,y\colon\srt{E}$.  Unification and matching in this algebra produce a-finite number of most general unifiers, that is, the unification type-is finitary.  For example, $\{x\mapsto u,y\mapsto v\}$ and $\{x\mapsto-\gen^v,u\mapsto \gen^y\}$ unify $x^y$ and $u^v$.  Unification is-finitary because of an approximation.  To unify $a^{xy}$ and~$b^{wz}$,-we unify $a^{xy}$ with~$\gen^{uv}$ and $\gen^{vu}$ with~$b^{wz}$,-where~$u$ and~$v$ are freshly generated variables.  In other words,-for the purpose of unification only, the equation for exponentiation-is $(\gen^x)^y\approx (\gen^y)^x$.  Expository Haskell code for-unification and matching with just the equation for exponentiation is-presented in Appendix~\ref{sec:haskell}.--Origination assumption in roles and skeletons can only be applied to a-subset of the messages of an algebra---the atoms.  In {\sdha},-asymmetric keys and exponents are atoms, but symmetric keys are not.-(Similarly, in the implemented Diffie-Hellman algebra, messages of-sort \texttt{base} are not atoms.)--A message~$t_0$ is \emph{carried by}~$t_1$, written $t_0\sqsubseteq-t_1$ if~$t_0$ can be derived from~$t_1$ given the right set of keys,-that is $\sqsubseteq$ is the smallest reflexive, transitive relation-such that $t_0\sqsubseteq t_0$, $t_0\sqsubseteq (t_0, t_1)$,-$t_1\sqsubseteq (t_0, t_1)$, and $t_0\sqsubseteq\enc{t_0}{t_1}$.--The introduction of the Diffie-Hellman algebra requires a new relation-on messages.  A message~$t_0$ is \emph{held by}~$t_1$, written-$t_0\preceq t_1$ iff $t_1$ carries $t_0$ or $t_1$ is in the exponent-of a carried term.  That is $\preceq$ is the smallest reflexive,-transitive relation such that $t_0\preceq t_0$, $t_0\preceq (t_0,-t_1)$, $t_1\preceq (t_0, t_1)$, $t_0\preceq\enc{t_0}{t_1}$,-$t_1\preceq t_0^{t_1}$.--\section{Strand Spaces}\label{sec:strand spaces}--A run of a protocol is viewed as an exchange of messages by a finite-set of local sessions of the protocol.  Each local session is called a-\emph{strand}~\cite{ThayerEtal99}.  The behavior of a strand, its-\emph{trace}, is a non-empty sequence of messaging events.  An-\emph{event} is either a message transmission or a reception.  In the-Basic Crypto Algebra, a message originates in a trace if it is carried-by some event and the first event in which it is carried is a-transmission.  For Diffie-Hellman, a message \emph{originates} in a-trace if it is held by some event and the first event in which it is-held is a transmission.--A similar change was made for skeletons.  An atom assumed to be-uniquely originating need only be held by some term within a skeleton,-it no longer must be carried.--\section{Derivable Messages}\label{sec:pen deriv mesgs}--Suppose~$T$ is a set of messages.  Let $\to$ be a reduction relation-on sets of messages defined as follows:-$$\begin{array}{r@{{}\to{}}ll}-\{(t_0,t_1)\}\cup T&\{t_0,t_1\}\cup T\\-\{\enc{t_0}{t_1}\}\cup T&\{t_0,\enc{t_0}{t_1}\}\cup T-&\mbox{if $t_1^{-1}\in D(T)$ and $t_0\notin T$}-\end{array}$$-The minimum decryption set~$M(T)$ is the normal form of relation~$\to$,-i.e.\ $T\to^\ast M(T)$ and there is no~$T'$ such that $M(T)\to T'$.--A message~$t$ is \emph{derivable} from~$T$, iff $t\in D(T)$, where-$$\begin{array}{r@{{}={}}l}-D^0&M(T)\\-D^{n+1}&\left\{\begin{array}{c@{{}\mid{}}l}-(x,y)&x,y\in D^n\\-\enc{x}{y}&x,y\in D^n,y\colon\srt{A}\lor y\colon\srt{S}\\-x^y& x,y\in D^n, x\colon\srt{S}, y\colon\srt{E}-\end{array}\right\}\\-D(T)&\bigcup_{n\in\nat}D^n-\end{array}$$--\section{Conclusion}--In this algebra, one cannot analyze group Diffie-Hellman protocols, as-they make use of the associativity of exponents.  On the other hand,-this algebra appears to allow the analysis of the basic Diffie-Hellman-Key Exchange.  In terms of implementation, allowances have to be made-for the fact that unification may produce more than one most general-unifier.--\bibliography{cpsa}-\bibliographystyle{plain}--\appendix--\section{Unification and Matching in Haskell}\label{sec:haskell}--\begingroup\footnotesize-\begin{verbatim}--- Unification and matching in a simple Diffie-Hellman algebra--module SimpleDiffieHellman where---- Equational unification and matching in an algebra with the--- following equation is used to analyze protocols that make use of--- the Diffie-Hellman problem.------      exp(exp(x, y), z) = exp(exp(x, z), y)------ The module shows how to perform the unification and matching.--import Char(isDigit, isAlpha)---- TERMS---- Variables are just integers so that it is easy to freshly generate--- them.--type Var = Int--data Term                       -- A term is-    = V Var                     -- a variable, or a-    | F String [Term]           -- function symbol and a list of terms---- Equality modulo the equation: exp(exp(x, y), z) = exp(exp(x, z), y).-instance Eq Term where-    (V x) == (V y) = x == y-    (F "exp" [F "exp" [x, y], z]) == (F "exp" [F "exp" [x', y'], z']) =-         x == x' && y == y' && z == z' ||-         x == x' && y == z' && z == y'-    (F sym ts) == (F sym' ts') = sym == sym' && ts == ts'-    _ == _ = False---- SUBSTITUTIONS---- A substitution is a map from variables to terms-type Subst = [(Var, Term)]---- Apply a substitution to a term-subst :: Subst -> Term -> Term-subst s (V x) =-    case chase s (V x) of-      V y -> V y-      t -> subst s t-subst s (F sym ts) =-    F sym (map (subst s) ts)---- A substitution may contain an equivalence class of variables.  The--- chase function finds the canonical representitive of the--- equivalence class.-chase :: Subst -> Term -> Term-chase s (V x) =-    case lookup x s of-      Nothing -> V x-      Just t -> chase s t-chase _ t = t---- UNIFICATION---- This is the entry point-unify :: Term -> Term -> [Subst]-unify t t' =-    unify0 t t' []---- Chase variables to start unifying two terms-unify0 :: Term -> Term -> Subst -> [Subst]-unify0 t t' s =-    unify1 (chase s t) (chase s t') s---- Unification by case analysis-unify1 :: Term -> Term -> Subst -> [Subst]-unify1 (V x) (V y) s            -- Unify two variables-    | x == y = [s]              -- Nothing to do-    | x < y = [(y, V x) : s]    -- Substitute larger variable-    | otherwise = [(x, V y) : s] -- in preference to a smaller one-unify1 (V x) t s-    | occurs x t = []           -- Fail when x is in t-    | otherwise = [(x, t) : s]-unify1 t t'@(V _) s =-    unify1 t' t s--- Unify using the Diffie-Hellman equation.--- To make unification tractable, one makes use of the equation--- exp(exp(gen(), x), y) = exp(exp(gen(), y), x).-unify1 (F "exp" ts@[u, v]) (F "exp" ts'@[u', v']) s =-    unifyList ts ts' s ++     -- Ordinary unification-    -- Add an instances of the equation, and unify on both sides-    do-      s' <- unifyList ts left s-      unifyList ts' right s'-    where-      -- Generate a fresh variable by looking at the variables in use-      var = nextVar ([u, v,  u', v'] ++ terms s) -- Include  substitution-      var' = var + 1                -- Generate another variable-      left = [F "exp" [F "gen" [], V var], V var'] -- One side of equation-      right = [F "exp" [F "gen" [], V var'], V var] -- And the other-unify1 (F sym ts) (F sym' ts') s -- Unify ordinary compound terms-    | sym /= sym' = []           -- Fail on symbol clash-    | otherwise = unifyList ts ts' s--unifyList :: [Term] -> [Term] -> Subst -> [Subst]-unifyList [] [] s = [s]-unifyList (t:ts) (t':ts') s =-    do-      s <- unify0 t t' s-      unifyList ts ts' s-unifyList _ _ _ = []---- Find next unused variable in a list of terms-nextVar :: [Term] -> Var-nextVar [] = 0-nextVar ts =-    maximum (map nextVariable ts)-    where-      nextVariable (V x) = x + 1-      nextVariable (F _ ts) = nextVar ts---- Returns the terms in a substitution.-terms :: Subst -> [Term]-terms s =-    [ t' |-      (x, t) <- s,-      t' <- [V x, t] ]---- Does variable x occur in term t?-occurs :: Var -> Term -> Bool-occurs x (V y) = x == y-occurs x (F _ ts) = any (occurs x) ts---- MATCHING---- This is the entry point-match :: Term -> Term -> [Subst]-match t t' =-    match0 t t' []---- Matching by case analysis-match0 :: Term -> Term -> Subst -> [Subst]-match0 (V x) t s =-    case lookup x s of-      Nothing -> [(x, t) : s]-      Just t' -> if t == t' then [s] else []--- Match using the Diffie-Hellman equation-match0 (F "exp" [x, y]) (F "exp" [F "exp" [x', y'], z']) s =-    matchList [x, y] [F "exp" [x', y'], z'] s ++-    matchList [x, y] [F "exp" [x', z'], y'] s-match0 (F sym ts) (F sym' ts') s-    | sym /= sym' = []-    | otherwise = matchList ts ts' s-match0 _ _ _ = []--matchList :: [Term] -> [Term] -> Subst -> [Subst]-matchList [] [] s = [s]-matchList (t:ts) (t':ts') s =-    do-      s <- match0 t t' s-      matchList ts ts' s-matchList _ _ _ = []---- TERM ORDERING--instance Ord Term where-    compare (V x) (V y) = compare x y-    compare (F "exp" [F "exp" [x, y], z])-            (F "exp" [F "exp" [x', y'], z']) =-        case (compare y z, compare y' z') of-          (GT, GT) -> compare [F "exp" [x, z], y] [F "exp" [x', z'], y']-          (GT, _) -> compare [F "exp" [x, z], y] [F "exp" [x', y'], z']-          (_, GT) -> compare [F "exp" [x, y], z] [F "exp" [x', z'], y']-          _ -> compare [F "exp" [x, y], z] [F "exp" [x', y'], z']-    compare (F sym ts) (F sym' ts') =-        case compare sym sym' of-          EQ -> compare ts ts'-          c -> c-    compare (V _) (F _ _) = LT-    compare (F _ _) (V _) = GT---- TERM INPUT--instance Read Term where-    readsPrec _ s =-        readTerm s-        where-          readTerm s =-              [(V $ read (c:cs), t) | (c:cs, t) <- lex s,-                                      isDigit c] ++-              [(F (c:cs) ts, v)     | (c:cs, t) <- lex s,-                                      isAlpha c,-                                      ("(", u) <- lex t,-                                      (ts, v) <- readArgs u]-          readArgs s =-              [([], t)              | (")", t) <- lex s] ++-              [(x:xs, u)            | (x, t) <- reads s,-                                      (xs, u) <- readRest t]-          readRest s =-              [([], t)              | (")", t) <- lex s] ++-              [(x:xs, v)            | (",", t) <- lex s,-                                      (x, u) <- reads t,-                                      (xs, v) <- readRest u]---- TERM OUTPUT--instance Show Term where-    showsPrec _ (V x) =-        shows x-    showsPrec _ (F sym ts) =-        showString sym . showChar '(' . showArgs ts-        where-          showArgs [] = showChar ')'-          showArgs (x:xs) = shows x . showRest xs-          showRest [] = showChar ')'-          showRest (x:xs) = showChar ',' . shows x . showRest xs-\end{verbatim}-\endgroup-\end{document}
doc/cpsaspec.pdf view

binary file changed (330270 → 328419 bytes)

doc/cpsaspec.tex view
@@ -125,6 +125,8 @@ Finally, Chapter~\ref{chp:skeleton reduction} assembles reduction rules into one system that specifies the {\cpsa} program. +Appendix~\ref{chp:penetrator non-origination} describes an extension+to Strand Space theory that models passwords and related concepts. Appendix~\ref{chp:traces} details the sense in which a protocol role can be viewed as an abstraction of a program. Appendix~\ref{chp:logic} describes a formula in the language of@@ -1080,9 +1082,10 @@ If a preskeleton $k$ is not a skeleton, then it is either because some $t\in U_k$ actually originates at more than one node, or because for some $t\in U_k$, there is a node $n_1\in\gain_k(t)$, and a node-$n_0\in\orig_k(t)$ such that $n_0\nprec_k n_1$.  These obstructions-are resolved via identifying strands and enriching node orderings-respectively.  A \index{hulled+$n_0\in\orig_k(t)$ such that $n_0\nprec_k n_1$.  A preskeleton in+which an atom assumed to be uniquely originating originates more than+once is simply expunged.  The second obstruction is resolved by+enriching node orderings.  A \index{hulled   preskeleton}\index{preskeleton!hulled}\emph{hulled preskeleton} is a preskeleton in which every uniquely originating atom originates at most once, but it may lack some node orderings needed to be a@@ -1095,25 +1098,11 @@   skeleton}\index{skeleton!pruned}\emph{pruned skeleton}.  \begin{defn}[Hulling Reduction]\label{def:hulling}-Preskeleton $k_0$ reduces to preskeleton $k_1$ by hulling strands~$s$-and~$s'$, written $k_0\reduction{\ops{H}_{s,s'}}k_1$, iff there is-some $t\in U_{k_0}$ and distinct~$s$ and~$s'$ such that-$\{(s,i),(s',i')\}\subseteq\orig_{k_0}(t)$, a most general-unifier~$\sigma$ such that $\sigma(\Theta_{k_0}(s)(j))\equiv-\sigma(\Theta_{k_0}(s')(j))$ for all $1\leq j\leq|\Theta_{k_0}(s)|$,-and $k_0\reduction{\ops{S}_\sigma}k\reduction{\ops{C}_{s,s'}}k_1$-for some~$k$.  For the setwise hulling relation,-$\{k_0\}\setreduction{\ops{H}_{s,s'}}\{k_1\mid-k_0\reduction{\ops{H}_{s,s'}}k_1\}$, when $k_0$ has a message in-$U_{k_0}$ that originates on both~$s$ and~$s'$.+A non-hulled preskeleton~$k$ is expunged.  The setwise hulling+reduction rule is $\{k\}\setreduction{\ops{H}}\{\}$ when~$k$ is not+hulled. \end{defn} -Note that for-$k_0\reduction{\ops{S}_\sigma}k\reduction{\ops{C}_{s,s'}}k_1$, there-is a homomorphism from~$k_0$ to~$k_1$ when there is one from~$k_0$-to~$k$, i.e.\ when $\ops{S}_\sigma$ ensures that points of origination-are preserved.- \begin{defn}[Order Enrichment] Suppose hulled preskeleton~$k_0$ is not a skeleton.  Hulled preskeleton~$k_0$ reduces to skeleton~$k_1$ by order enrichment, written@@ -1165,6 +1154,12 @@ $k_0\reduction{\ops{P}_s}k_1$. \end{defn} +Note that for+$k_0\reduction{\ops{S}_\sigma}k\reduction{\ops{C}_{s,s'}}k_1$, there+is a homomorphism from~$k_0$ to~$k_1$ when there is one from~$k_0$+to~$k$, i.e.\ when $\ops{S}_\sigma$ ensures that points of origination+are preserved.+ There is one additional constraint on pruning recently identified.  In Chapter~\ref{chp:generalization} on generalization, a parameter to its reduction system is the point-of-view skeleton.  The point-of-view@@ -1182,6 +1177,7 @@ point-of-view skeleton, but the notation in the chapter on generalization shows how it might be done. +\iffalse \begin{defn}[Thinning] Two strands $s$ and $s'$ in a skeleton $k$ are \emph{effectively   equivalent} if $k$ with $s$ removed and $k$ with $s'$ removed are@@ -1193,6 +1189,7 @@ \end{defn}  Thinning is not used yet.+\fi  \section{Reduction Systems} @@ -1201,7 +1198,7 @@  There are two preskeleton reduction systems, one with pruning, and one without.  For the one without, let reduction $\twoheadrightarrow=-\bigcup_{s,s'}\setreduction{\ops{H}_{s,s'}}\cup\setreduction{\ops{O}}$.+\bigcup_{s,s'}\setreduction{\ops{H}}\cup\setreduction{\ops{O}}$.  \begin{defn}[Preskeleton Reduction System] Preskeleton~$k_0$ reduces to skeleton~$k_1$,@@ -1213,7 +1210,7 @@ For each skeleton~$k$, $k\reduction{\fn{skel}}k$.  When using pruning, let reduction $\twoheadrightarrow=-\bigcup_{s,s'}\setreduction{\ops{H}_{s,s'}}\cup\setreduction{\ops{O}}\cup+\bigcup_{s,s'}\setreduction{\ops{H}}\cup\setreduction{\ops{O}}\cup \bigcup_s\setreduction{\ops{P}_s}$.  \begin{defn}[Preskeleton Reduction System with Pruning]@@ -1550,13 +1547,14 @@ $(T_p,T_a)=\fn{dcmp}(k,n)$, so that~$T_p$ and~$T_a$ need not be recomputed. -\begin{defn}[Critical Position]+\begin{defn}[Critical Position]\label{def:critical position} Position~$p$ is a \index{critical position}\emph{critical position} of $t=\msg_k(n)$ if \begin{enumerate} \item $p$ is a carried position in~$t$, \item either $t\termat p\in U_k$, $t\termat p=\hash t_1$, or $t\termat   p=\enc{t_0}{t_1}$ and~$t_1$ is not derivable before~$n$ in~$k$,+  \label{item:nonce or encryption} \item $\fn{esc}(k,n,t\termat p)$ is defined, and \item $\fn{anc}(t,p)\cap \fn{esc}(k,n,t\termat p)=\emptyset$. \end{enumerate}@@ -1638,9 +1636,8 @@ selected as described in Section~\ref{sec:augmentation}, and there be a preskeleton~$k_1$ such that $k\reduction{\ops{S}_\sigma}k_0\reduction{\ops{A}_{n,r,C}}k_1$.-Similar to a hulling reduction (Definition~\ref{def:hulling}), suppose-there are strands~$s$ and~$s'$, where one of them is the newly created-strand, and a most general unifier~$\sigma'$ such that+Suppose there are strands~$s$ and~$s'$, where one of them is the newly+created strand, and a most general unifier~$\sigma'$ such that $\sigma'(\Theta_{k_1}(s)(j))\equiv \sigma'(\Theta_{k_1}(s')(j))$ for $1\leq j\leq|\Theta_{k_1}(s)|$.  Skeleton~$k_4$ is a \index{displacement}\emph{displacement} if@@ -1756,19 +1753,43 @@ for the acquired variable constraint. \end{note} +\chapter{Collapsing and Preconditioning}\label{chp:collapsing}++The input preskeleton is preconditioned before it is subjected to+authentication test solving.  The preskeleton is converted to a+skeleton and then collapsing is applied so as to ensure all shapes are+found.  Collapsing handles the case in which strands merged in the+input lead to shapes.++\begin{defn}[Collapsing]+Let $k_0$ and $k_1$ be two skeletons such that there are two+strands,~$s$ and~$s'$, and a most general unifier~$\sigma$ such that+$\sigma(\Theta_{k_0}(s)(j))\equiv \sigma(\Theta_{k_0}(s')(j))$ for all+$1\leq j\leq|\Theta_{k_0}(s)|$.  Then~$k_0$ \emph{collapses} to~$k_1$,+written $k_0\reduction{\fn{clp}}k_1$, if+$k_0\reduction{\ops{S}_\sigma}k\reduction{\ops{C}_{s,s'}}k'+\reduction{\fn{skel}}k_1$.+\end{defn}++\begin{defn}[Preconditioning]+For point-of-view preskeleton~$k_0$,~$k_0$ is preconditioned to~$k_1$,+written $k_0\reduction{\fn{pre}}k_1$, if+$k_0\reduction{\fn{skel}}k\mathbin{(\reduction{\fn{clp}})^\ast}k_1$.+\end{defn}+ \chapter{Generalization}\label{chp:generalization} -Each problem statement for {\cpsa} is expressed as a preskeleton.  If-the preskeleton cannot be transformed into a single skeleton using the-Preskeleton Reduction System, an error is signaled.  Otherwise, the-first skeleton is designated as the \index{point-of-view-  skeleton}\index{skeleton!point-of-view}point-of-view skeleton.  For-each skeleton generated from a point-of-view skeleton via contraction,-augmentation, and generalization, there is a homomorphism from the-point-of-view skeleton.  Simplifying the implementation is the-motivation for restricting the algorithm to problem statements that-are expressed by a single skeleton.+The cohort reduction system produces a set of realized skeletons.+Generalization attempts to convert that set into a set of skeletons.+Not all possible cases are implemented due to performance issues, so+it is not uncommon to find a realized skeleton in the output of a run+of {\cpsa} that is not a shape. +\begin{conj}[Shape Completeness]+Without generalization, {\cpsa} produces a complete set of shapes+among the realized skeletons in its output.+\end{conj}+ \begin{defn}[Generalize] A skeleton~$k_0$ \emph{generalizes} skeleton~$k_1$, written $k_1\reduction{<}_k k_0$, if@@ -1784,16 +1805,12 @@ is a maximally generalized realized skeleton derived from the preskeleton. -We write $k=\fn{pov}(k_0)$\index{pov@\fn{pov}} if there is a-unique~$k$ such that $k_0\reduction{\fn{skel}}k$ and there is a-homomorphism from~$k_0$ to~$k$.- \begin{defn}[Shape]-Let~$k_0$ be a preskeleton such that $k=\fn{pov}(k_0)$,-and let~$k_1$ be a realized skeleton such that-$k\mapsto k_1$.  Skeleton~$k_2$ is a \index{shape}\emph{shape} of~$k_0$ if-$k_1\reduction{\leq}_k k_2$, and~$k_2$ is maximal among skeletons that-generalize~$k_1$.+Let~$k_0$ be a preskeleton such that $k_0\reduction{\fn{pre}}k$ for+some skeleton~$k$, and let~$k_1$ be a realized skeleton such that+$k\mapsto k_1$.  Skeleton~$k_2$ is a \index{shape}\emph{shape}+of~$k_0$ if $k_1\reduction{\leq}_k k_2$, and~$k_2$ is maximal among+skeletons that generalize~$k_1$. \end{defn}  There are four generalization reductions used to transform a realized@@ -1865,16 +1882,12 @@ $k_0\reduction{\fn{gen}}_k k_1$. \end{defn} -\begin{note} The fact that each generalization reduction replaces a singleton with-just a singleton requires explanation.  We're not sure it's justified,-and harbor serious doubts.  It is justified if we can prove the-conjecture that the cohort reduction relation produces every shape,-and generalization just identifies which realized skeletons are-shapes.  However, one member of the test suite provides a counter-example to the conjecture.  Barring a bug in {\cpsa}, the conjecture-must be false.-\end{note}+just a singleton requires explanation.  It's simply a matter of+performance.  If all possibilities are considered, {\cpsa} run time+would become dominated by generalization.  Since generalization+failures do not interfere with producing a complete description of the+input, an approximation of the set of shapes is okay.  \begin{conj}[Generalization] The relation~$\setreduction{\fn{gen}}_k$ is terminating.@@ -1893,44 +1906,15 @@ edge, and therefore cannot be used to specify generalization by variable separation. -\chapter{Collapsing}\label{chp:collapsing}--Let reduction $\setreduction{\fn{cg}}_k=(\setreduction{\fn{co}}\cup-\setreduction{\fn{gen}}_k)^+$, the transitive closure of the cohort-and generalization setwise reduction relations.  The normal forms of-this relation are sets of shapes, however, shapes may be missing from-each set.  This occurs when {\cpsa} is run in a mode that omits-displacements when solving authentication tests, which is sometimes-done for performance reasons.  The missing shapes are found by-collapsing other shapes.--\begin{defn}[Collapsing]-Let $k_0$ and $k_1$ be two skeletons such that there are two-strands,~$s$ and~$s'$, and a most general unifier~$\sigma$ such that-$\sigma(\Theta_{k_0}(s)(j))\equiv \sigma(\Theta_{k_0}(s')(j))$ for all-$1\leq j\leq|\Theta_{k_0}(s)|$.  Then~$k_0$ \emph{collapses} to~$k_1$,-written $k_0\reduction{\fn{clp}}k_1$, if-$k_0\reduction{\ops{S}_\sigma}k\reduction{\ops{C}_{s,s'}}k'-\reduction{\fn{skel}}k_1$.-\end{defn}--\begin{defn}[Setwise Collapsing]-For the collapsing relation $\setreduction{\fn{clp}}_k\subseteq-\pow{\alg{K}}\times\pow{\alg{K}}$,-$K_0\setreduction{\fn{clp}}_k K_1$ if~$K_0$ is a normal form of-$\setreduction{\fn{cg}}_k$, for some $k_0\in K_0$, $k_0-\reduction{\fn{clp}}k$, $\{k\}\cup K_0\setreduction{\fn{cg}}_k K_1$,-and $K_0\neq K_1$.-\end{defn}--Notice that a setwise cohort reduction may produce the empty set, but-a setwise generalization and collapsing reduction never does.+Variable separation can be expensive when there are many possible ways+to separate variables.  The implementation simply truncates the search+when it grows too large.  \chapter{Skeleton Reduction System}\label{chp:skeleton reduction}  Let reduction-$\twoheadrightarrow_k=\setreduction{\fn{cg}}_k\cup-(\setreduction{\fn{clp}}_k)^+$.  This reduction system specifies the+$\twoheadrightarrow_k=(\setreduction{\fn{co}}\cup+\setreduction{\fn{gen}}_k)^+$.  This reduction system specifies the {\cpsa} program.  \begin{conj}@@ -1939,7 +1923,7 @@  \begin{conj}[Soundness]\label{cnj:soundness} Let~$k_0$ be a preskeleton and~$k$ be an unrealized skeleton such that-$k=\fn{pov}(k_0)$.  Skeleton~$k_1$ is a shape of~$k_0$ if+$k_0\reduction{\fn{pre}}k$.  Skeleton~$k_1$ is a shape of~$k_0$ if $\{k\}\twoheadrightarrow_k K$, $k_1\in K$, and~$K$ is a normal form. \end{conj} @@ -1948,7 +1932,7 @@  \begin{conj}[Completeness]\label{cnj:completeness} Let~$k_0$ be a preskeleton and~$k$ be an unrealized skeleton such that-$k=\fn{pov}(k_0)$.  For all~$K$ such that $\{k\}\twoheadrightarrow_k+$k_0\reduction{\fn{pre}}k$.  For all~$K$ such that $\{k\}\twoheadrightarrow_k K$, $\sembrack{k_0}=\bigcup_{k_1\in K}\sembrack{k_1}$. \end{conj} @@ -1958,6 +1942,28 @@ of this document.  \appendix++\chapter{Penetrator Non-Origination Assumptions}\relax+\label{chp:penetrator non-origination}++Penetrator non-origination assumptions have been added as an extension+to the basic strand space theory.  An atom is \index{penetrator+  non-originating}\index{non-originating!penetrator}\emph{penetrator+  non-originating} in a bundle if it originates on no penetrator+strand, but each of its variables occurs in some strand's trace.++Penetrator non-origination assumptions can be used to model+passwords.  Several regular participants might know a password and+originate it in a run of a protocol, but an idealized password is one+the penetrator cannot guess.++A penetrator non-originating atom is similar to a non-originating+atom, except in that it can be carried.  There are two definitions+that require change.  Penetrator non-originating atoms must be added+to the avoidance set of Definition~\ref{def:avoid}.  When the message+at a critical position is an atom (see Definition~\ref{def:critical+  position}, Item~\ref{item:nonce or encryption}), instead of being+uniquely originating, and can also be penetrator non-originating.  \chapter{Programs Specified by a Role}\label{chp:traces}
doc/cpsauser.html view
@@ -131,6 +131,7 @@ TRACE      ::= (trace EVENT+) EVENT      ::= (send TERM) | (recv TERM) ROLE-ALIST ::= (non-orig HT-TERM*) ROLE-ALIST+            |  (pen-non-orig HT-TERM*) ROLE-ALIST             |  (uniq-orig TERM*) ROLE-ALIST | ... HT-TERM    ::= TERM | (INT TERM) PROT-ALIST ::= ...</pre>@@ -140,15 +141,19 @@ <tt>ID</tt> is a symbol that names the role. The <tt>ALG</tt> symbol identifies the algebra used by the protocol. For the Basic Cryptographic Algebra, the symbol is <tt>basic</tt>. For the Diffie-Hellman Algebra, the symbol is-<tt>diffie-hellman</tt>. The <tt>var</tt> form contains symbols that declare-the sort of the variables used in this role. The set of sort symbols is algebra-specific. The protocol association list has no predefined keys, while the role-association list has two. The value associated with both of these keys must be-atoms in the algebra. Each <tt>non-orig</tt> term must not be carried by any-event in the role's trace, but each of its variables must occur in some term. A-role non-origination assumption of the form <tt>(3 a)</tt> asserts that atom-<tt>a</tt> will not be mapped into an instance unless its height is at least-three. Each <tt>uniq-orig</tt> term must originate in the role's trace. Every+<tt>diffie-hellman</tt>. The <tt>var</tt> form contains symbols that+declare the sort of the variables used in this role. The set of sort+symbols is algebra specific. The protocol association list has no+predefined keys, while the role association list has three. The value+associated with both of these keys must be atoms in the+algebra. Each <tt>non-orig</tt> term must not be carried by any event+in the role's trace, but each of its variables must occur in some+term.  A role non-origination assumption of the form <tt>(3 a)</tt>+asserts that atom <tt>a</tt> will not be mapped into an instance+unless its height is at least three.  For each <tt>pen-non-orig</tt>+term, each of its variables must occur in some term, but unlike a+non-origination assumption, the term may be carried.+Each <tt>uniq-orig</tt> term must originate in the role's trace. Every non-atomic variable must be acquired by the role's trace.</p>  <p>The structure of sorts and terms in the Basic Cryptographic Algebra@@ -173,6 +178,7 @@ STRAND     ::= (defstrand ID INT MAPLET*) | (deflistener TERM) MAPLET     ::= (TERM TERM) SKEL-ALIST ::= (non-orig TERM*) SKEL-ALIST+            |  (pen-non-orig TERM*) SKEL-ALIST             |  (uniq-orig TERM*) SKEL-ALIST             |  (precedes NODE-PAIR*) SKEL-ALIST | ... NODE-PAIR  ::= (NODE NODE)@@ -194,12 +200,13 @@ Zero identifies the first strand, and the first node in a strand has position zero.</p> -<p>A variable may occur in more then one role within a protocol. The reader-performs a renaming so as to ensure these occurrences do not overlap.-Furthermore, the maplets used to specify a strand need not specify how to map-every role variable. The reader inserts missing mappings, and renames every-skeleton variable that also occurs in a role of its protocol. The sort of every-skeleton variable that occurs in the <tt>non-orig</tt> or <tt>uniq-orig</tt>+<p>A variable may occur in more then one role within a protocol. The+reader performs a renaming so as to ensure these occurrences do not+overlap.  Furthermore, the maplets used to specify a strand need not+specify how to map every role variable. The reader inserts missing+mappings, and renames every skeleton variable that also occurs in a+role of its protocol. The sort of every skeleton variable that occurs+in the <tt>non-orig</tt>, <tt>pen-non-orig</tt>, or <tt>uniq-orig</tt> list or in a maplet must be declared.</p>  <p>On output, key-value pairs are added to all skeleton's association list.@@ -249,7 +256,8 @@   <pre>(exp (exp (gen) x) y) = (exp (exp (gen) y) x)</pre> </blockquote> -<p>Diffie-Hellman support is experimental. Avoid variables of sort base.</p>+<p>Diffie-Hellman support is experimental and known to have+flaws. Avoid variables of sort base.</p>  <h3>Macros</h3> @@ -279,7 +287,6 @@   -m INT     --margin=INT       set output margin (default 72)   -e         --expand           expand macros only; don't analyze   -n         --noisochk         disable isomorphism checks-  -d         --displacement     disable displacement   -c         --check-nonces     check nonces first   -t         --try-old-strands  try old strands first   -r         --reverse-nodes    try younger nodes first@@ -366,9 +373,10 @@ draws a dashed line between <tt>(send (* a b))</tt> and <tt>(recv (* b a))</tt>.</p> -<p>In the tree drawing, for dead skeletons, the label is red, unless it has-been seen before, in which case it is orange. Otherwise the label is green for-skeletons seen before. Seen skeleton labels are rendered in an italic font.</p>+<p>In the tree drawing, the label of a shape is blue. For dead+skeletons, the label is red, unless it has been seen before, in which+case it is orange. Otherwise the label is green for skeletons seen+before. Seen skeleton labels are rendered in an italic font.</p>  <p>By the default, <tt>cpsagraph</tt> generates a view of CPSA S-expressions as a compound document that contains SVG within XHTML. This view integrates
doc/macros.tex view
@@ -1,5 +1,5 @@ \newcommand{\cpsa}{\textsc{cpsa}}-\newcommand{\version}{2.2.8}+\newcommand{\version}{2.2.9} \newcommand{\cpsacopying}{\begingroup   \renewcommand{\thefootnote}{}\footnotetext{{\copyright} 2010 The     MITRE Corporation.  Permission to copy without fee all or part of
ghci view
@@ -1,2 +1,3 @@-:set -fglasgow-exts -fbreak-on-error -isrc:dist/build/autogen-:set args -a diffie-hellman tst/dhke.sch+:set -isrc:dist/build/autogen+:set -fbreak-on-error+:set args tst/dhke.scm
src/CPSA/Annotations/Main.hs view
@@ -18,11 +18,13 @@ import CPSA.Annotations.Annotations import qualified CPSA.Basic.Algebra import qualified CPSA.DiffieHellman.Algebra+import qualified CPSA.DiffieHellmanNoReciprocal.Algebra import qualified CPSA.SimpleDiffieHellman.Algebra  -- Algebra names algs :: [String] algs = [CPSA.Basic.Algebra.name, CPSA.DiffieHellman.Algebra.name,+        CPSA.DiffieHellmanNoReciprocal.Algebra.name,         CPSA.SimpleDiffieHellman.Algebra.name]  main :: IO ()@@ -39,6 +41,10 @@               go (step h alg CPSA.Basic.Algebra.origin margin) p []           | alg == CPSA.DiffieHellman.Algebra.name ->               go (step h alg CPSA.DiffieHellman.Algebra.origin margin) p []+          | alg == CPSA.DiffieHellmanNoReciprocal.Algebra.name ->+              go (step h alg+                       CPSA.DiffieHellmanNoReciprocal.Algebra.origin margin)+                 p []           | alg == CPSA.SimpleDiffieHellman.Algebra.name ->               go (step h alg CPSA.SimpleDiffieHellman.Algebra.origin margin)                  p []
+ src/CPSA/DiffieHellmanNoReciprocal/Algebra.hs view
@@ -0,0 +1,1656 @@+-- Diffie-Hellman Without Reciprocals Algebra implementation++-- This module is a version of Diffie-Hellman in which exponents form+-- an commutative monoid.  There are issues to be resolved before this+-- version of Diffie-Hellman can be used.++-- The module implements a many-sorted algebra, but is used as an+-- order-sorted algebra.  It exports a name, and the origin used to+-- generate variables.++-- Copyright (c) 2009 The MITRE Corporation+--+-- This program is free software: you can redistribute it and/or+-- modify it under the terms of the BSD License as published by the+-- University of California.++{-# LANGUAGE MultiParamTypeClasses, CPP #-}++#define INTERACTIVE_DEBUGGING++module CPSA.DiffieHellmanNoReciprocal.Algebra (name, origin+#if defined INTERACTIVE_DEBUGGING+                                               , iUnify, iMatch+#endif+                                               ) where++#if defined INTERACTIVE_DEBUGGING+import System.IO(stdin)+import System.IO.Error(try)+#endif++import Control.Monad (foldM)+import qualified Data.List as L+import qualified Data.Set as S+import Data.Set (Set)+import qualified Data.Map as M+import Data.Map (Map)+import Data.Char (isDigit)+import qualified CPSA.Lib.CPSA as C+import CPSA.Lib.CPSA (SExpr(..), Pos, annotation)+import qualified CPSA.DiffieHellmanNoReciprocal.LinDiophEq as D++{-- Debugging support+import System.IO.Unsafe++z :: Show a => a -> b -> b+z x y = unsafePerformIO (print x >> return y)++zz :: Show a => a -> a+zz x = z x x++zn :: Show a => a -> Maybe b -> Maybe b+zn x Nothing = z x Nothing+zn _ y = y++zf :: Show a => a -> Bool -> Bool+zf x False = z x False+zf _ y = y++zt :: Show a => a -> Bool -> Bool+zt x True = z x True+zt _ y = y+--}++-- Preserve the ability to use GHC 6.x+foldrWithKey :: (k -> a -> b -> b) -> b -> Map k a -> b+#if defined __GLASGOW_HASKELL__ && __GLASGOW_HASKELL__ < 700+foldrWithKey = M.foldWithKey+#else+foldrWithKey = M.foldrWithKey+#endif++-- Export iUnify and iMatch for debugging in GHCi.+-- Both functions request a declaration and then two terms.+-- Example: ((x y z expn)) (mul x x y) z+#if defined INTERACTIVE_DEBUGGING+iUnify :: IO [Subst]+iUnify =+    iRun f emptySubst+    where+      f t0 t1 r = maybe [] (: []) (unify t0 t1 r)++iMatch :: IO [Env]+iMatch =+    do+      ans <- try (iRun aMatch emptyEnv)+      case ans of+        Right ans -> return ans+        Left err -> fail (show err)+    where+      aMatch t t' (g, e) = map (\e -> (g, e)) $ match t t' e++iRun :: (Term -> Term -> (Gen, a) -> [(Gen, a)]) -> a -> IO [a]+iRun f mt =+    do+      sexpr <- load+      t <- load+      t' <- load+      case (sexpr, t, t') of+        (Just (L _ vars), Just t, Just t') ->+            return (run f mt vars t t')+        err -> fail ("bad load: " ++ show err)++run :: (Term -> Term -> (Gen, a) -> [(Gen, a)]) -> a ->+       [SExpr Pos] -> SExpr Pos -> SExpr Pos -> [a]+run f mt vars t t' =+    do+      (gen, vars) <- loadVars origin vars+      t <- loadTerm vars t+      t' <- loadTerm vars t'+      (_, a) <- f t t' (gen, mt)+      return a++load :: IO (Maybe (SExpr Pos))+load =+    do+      h <- C.posHandle "" stdin+      content <- try (C.load h)+      case content of+        Left msg ->+            do+              print msg+              return Nothing+        Right sexpr -> return sexpr++{--+gRun :: Gen -> Term -> a -> a+gRun (Gen n) t a =+    foldVars f a t+    where+      f a t =+          case varId t of+            Id (m, _) | m >= n -> error ("Bad gen " ++ show n)+            _ -> a++gMatch :: Term -> Term -> GenEnv -> Maybe GenEnv+gMatch t t' r@(g, _) = gRun g t' (match t t' r)++gUnify :: Term -> Term -> GenSubst -> Maybe GenSubst+gUnify t t' r@(g, _) = gRun g (F Cat [t, t']) (unify t t' r)+--}+#endif++name :: String+name = "diffie-hellman-no-reciprocal"++-- An identifier++newtype Id = Id (Integer, String) deriving Show++-- The integer distinguishes an identifier, the string is for printing.++instance Eq Id where+    (Id (x, _)) == (Id (x', _)) = x == x'++instance Ord Id where+    compare (Id (x, _)) (Id (x', _)) = compare x x'++idName :: Id -> String+idName (Id (_, name)) = name++-- Counter used for generating fresh identifiers.++newtype Gen = Gen (Integer) deriving Show++origin :: Gen+origin = Gen (0)++freshId :: Gen -> String -> (Gen, Id)+freshId (Gen (i)) name = (Gen (i + 1), Id (i, name))++cloneId :: Gen -> Id -> (Gen, Id)+cloneId gen x = freshId gen (idName x)++-- A term in an Abelian group is a map from identifiers to non-zero integers.++type Group = Map Id Int++isGroupVar :: Group -> Bool+isGroupVar t =+    M.size t == 1 && head (M.elems t) == 1++groupVar :: Id -> Term+groupVar x = G $ M.singleton x 1++invert :: Group -> Group+invert t = M.map negate t++expg :: Group -> Int -> Group+expg _ 0 = M.empty+expg t 1 = t+expg t n = M.map (* n) t++mul :: Group -> Group -> Group+mul t t' =+    foldrWithKey f t' t         -- Fold over the mappings in t+    where+      f x c t =                 -- Alter the mapping of+          M.alter (g c) x t     -- variable x in t+      g c Nothing =             -- Variable x not currently mapped+          Just c                -- so add a mapping+      g c (Just c')             -- Variable x maps to c'+          | c + c' == 0 = Nothing     -- Delete the mapping+          | otherwise = Just $ c + c' -- Adjust the mapping++group :: [(Id, Int)] -> Group+group assocs =+    foldr f M.empty assocs+    where+      f (x, c) t = mul (expg (M.singleton x 1) c) t++-- Function symbols--see foldVar to see the arity of each symbol.+data Symbol+    = Text                      -- Text atom+    | Data                      -- Another text-like atom+    | Name                      -- Principal atom+    | Skey                      -- Symmetric key atom+    | Base                      -- Base of an exponentiated atom+    | Ltk                       -- Long term shared symmetric key+    | Akey                      -- Asymmetric key atom+    | Invk                      -- Inverse of asymmetric key+    | Pubk                      -- Public asymmetric key of a principal+    | Genr                      -- The generator constant for the group+    | Exp                       -- Exponentiation function symbol+    | Cat                       -- Term concatenation+    | Enc                       -- Encryption+      deriving (Show, Eq, Ord, Enum, Bounded)++-- A Basic Crypto Algebra Term++data Term+    = I !Id+    | C !String+    | F !Symbol ![Term]+    | G !Group                  -- An exponent, an Abelian group+      deriving (Show, Eq, Ord)++-- Basic terms are introduced by defining a function used to decide if+-- a term is well-formed.  The context of an occurrence of an identifier+-- determines its sort.  A term that contains just an identifier and its+-- sort information is called a variable.  The sort of a variable is+-- one of mesg, text, data, name, skey, and akey.++-- Terms that represent variables.+isVar :: Term -> Bool+isVar (I _) = True           -- Sort: mesg+isVar (F s [I _]) =+    -- Sorts: text, data, name, skey, and akey+    s == Text || s == Data || s == Name || s == Skey || s == Akey || s == Base+isVar (G t) = isGroupVar t+isVar _ = False++-- Extract the identifier from a variable+varId :: Term -> Id+varId (I x) = x+varId (F Text [I x]) = x+varId (F Data [I x]) = x+varId (F Name [I x]) = x+varId (F Skey [I x]) = x+varId (F Akey [I x]) = x+varId (F Base [I x]) = x+varId (G t) | isGroupVar t = head $ M.keys t+varId _ = error "Algebra.varId: term not a variable with its sort"++-- A list of terms are well-formed if each one has the correct+-- structure and every occurrence of an identifier in a term has the+-- same sort.  Variable environments are used to check the sort+-- condition.  It maps an identifier to a variable that contains the+-- identifier.++-- termsWellFormed u ensures all terms in u use each identifier at the+-- same sort, and makes sure every term has the correct structure.+termsWellFormed :: [Term] -> Bool+termsWellFormed u =+    loop emptyVarEnv u+    where+      loop _ [] = True+      loop env (t : u) =+          case termWellFormed env t of+            Nothing -> False+            Just env' -> loop env' u++newtype VarEnv = VarEnv (Map Id Term) deriving Show++emptyVarEnv :: VarEnv+emptyVarEnv = VarEnv M.empty++-- Check the structure and sort condition.++termWellFormed :: VarEnv -> Term -> Maybe VarEnv+termWellFormed xts t@(I x) =+    extendVarEnv xts x t        -- Mesg variable+termWellFormed xts t@(F Text [I x]) =+    extendVarEnv xts x t        -- Text variable+termWellFormed xts t@(F Data [I x]) =+    extendVarEnv xts x t        -- Data variable+termWellFormed xts t@(F Name [I x]) =+    extendVarEnv xts x t        -- Name variable+termWellFormed xts t@(F Skey [I x]) =+    extendVarEnv xts x t        -- Symmetric key variable+termWellFormed xts (F Skey [F Ltk [I x, I y]]) =+    -- Long term shared symmetric key+    doubleTermWellFormed xts (F Name [I x]) (F Name [I y])+termWellFormed xts (F Akey [t]) = -- Asymmetric key terms+    case t of+      I x -> extendVarEnv xts x (F Akey [I x])+      F Invk [I x] -> extendVarEnv xts x (F Akey [I x])+      F Pubk [I x] -> extendVarEnv xts x (F Name [I x])+      F Pubk [C _, I x] -> extendVarEnv xts x (F Name [I x])+      F Invk [F Pubk [I x]] -> extendVarEnv xts x (F Name [I x])+      F Invk [F Pubk [C _, I x]] -> extendVarEnv xts x (F Name [I x])+      _ -> Nothing+termWellFormed xts (F Base [t]) =+    baseVarEnv xts t+    where+      baseVarEnv xts t@(I x) =+          extendVarEnv xts x (F Base [t])+      baseVarEnv xts (F Genr []) =+          Just xts+      baseVarEnv xts (F Exp [t0, G t1]) =+          do+            xts <- baseVarEnv xts t0+            termWellFormed xts (G t1)+      baseVarEnv _ _ = Nothing+termWellFormed xts (G t) =+    foldM expnVarEnv xts (M.keys t)+    where+      expnVarEnv xts x =+          extendVarEnv xts x (groupVar x)+termWellFormed xts (C _) =+    Just xts                    -- Tags+termWellFormed xts (F Cat [t0, t1]) =+    doubleTermWellFormed xts t0 t1  -- Concatenation+termWellFormed xts (F Enc [t0, t1]) =+    doubleTermWellFormed xts t0 t1  -- Encryption+termWellFormed _ _ = Nothing++-- Extend when sorts agree+extendVarEnv :: VarEnv -> Id -> Term -> Maybe VarEnv+extendVarEnv (VarEnv env) x t =+    case M.lookup x env of+      Nothing -> Just $ VarEnv $ M.insert x t env+      Just t' -> if t == t' then Just (VarEnv env) else Nothing++doubleTermWellFormed :: VarEnv -> Term -> Term -> Maybe VarEnv+doubleTermWellFormed xts t0 t1 =+    do+      xts <- termWellFormed xts t0+      termWellFormed xts t1++-- Is the sort of the term a base sort?+isAtom :: Term -> Bool+isAtom (I _) = False+isAtom (C _) = False+isAtom (F s _) =+    s == Text || s == Data || s == Name || s == Skey || s == Akey+isAtom (G _) = True++-- Does a term occur in another term?+occursIn :: Term -> Term -> Bool+occursIn (G t) (G t') =+    all f (M.assocs t)+    where+      f (x, n) =+          let n' = M.findWithDefault 0 x t' in+          n > 0 && n' >= n || n < 0 && n' <= n+occursIn t t' =+    t == t' ||+      case t' of+        F _ u -> any (occursIn t) u+        _ -> False++-- Fold f through a term applying it to each variable in the term.+foldVars :: (a -> Term -> a) -> a -> Term -> a+foldVars f acc t@(I _) = f acc t          -- Mesg variable+foldVars f acc t@(F Text [I _]) = f acc t -- Text variable+foldVars f acc t@(F Data [I _]) = f acc t -- Data variable+foldVars f acc t@(F Name [I _]) = f acc t -- Name variable+foldVars f acc t@(F Skey [I _]) =+    f acc t                     -- Symmetric key variable+foldVars f acc (F Skey [F Ltk [I x, I y]]) =+    -- Long term shared symmetric key+    f (f acc (F Name [I x])) (F Name [I y])+foldVars f acc t@(F Akey [I _]) = f acc t -- Asymmetric keys+foldVars f acc (F Akey [F Invk [I x]]) = f acc (F Akey [I x])+foldVars f acc (F Akey [F Pubk [I x]]) = f acc (F Name [I x])+foldVars f acc (F Akey [F Pubk [C _, I x]]) = f acc (F Name [I x])+foldVars f acc (F Akey [F Invk [F Pubk [I x]]]) = f acc (F Name [I x])+foldVars f acc (F Akey [F Invk [F Pubk [C _, I x]]]) = f acc (F Name [I x])+foldVars f acc (F Base [t]) =+    baseAddVars acc t+    where+      baseAddVars acc t@(I _) =+          f acc (F Base [t])+      baseAddVars acc (F Genr []) =+          acc+      baseAddVars acc (F Exp [t0, G t1]) =+          foldVars f (baseAddVars acc t0) (G t1)+      baseAddVars _ _ = error "Algebra.foldVars: Bad term"+foldVars f acc (G t) =+    foldl expnAddVars acc (M.keys t)+    where+      expnAddVars acc x =+          f acc (groupVar x)+foldVars _ acc (C _) = acc        -- Tags+foldVars f acc (F Cat [t0, t1]) = -- Concatenation+    foldVars f (foldVars f acc t0) t1+foldVars f acc (F Enc [t0, t1]) = -- Encryption+    foldVars f (foldVars f acc t0) t1+foldVars _ _ t = error $ "Algebra.foldVars: Bad term " ++ show t++-- Fold f through a term applying it to each term that is carried by the term.+foldCarriedTerms :: (a -> Term -> a) -> a -> Term -> a+foldCarriedTerms f acc t@(F Cat [t0, t1]) = -- Concatenation+    foldCarriedTerms f (foldCarriedTerms f (f acc t) t0) t1+foldCarriedTerms f acc t@(F Enc [t0, _]) = -- Encryption+    foldCarriedTerms f (f acc t) t0+foldCarriedTerms f acc t = f acc t -- Exponents, atoms, and tags++-- Is a term carried by another term?+carriedBy :: Term -> Term -> Bool+carriedBy t t' =+    t == t' ||+      case t' of+        F Cat [t0, t1] -> carriedBy t t0 || carriedBy t t1+        F Enc [t0, _] -> carriedBy t t0+        _ -> False++-- Is a term held by another term?+heldBy :: Term -> Term -> Bool+heldBy t t' =+    t == t' ||+      case t' of+        F Cat [t0, t1] -> heldBy t t0 || heldBy t t1+        F Enc [t0, _] -> heldBy t t0+        F Base [F Exp [_, t1]] -> expnHeldBy t t1+        _ -> False++expnHeldBy :: Term -> Term -> Bool+expnHeldBy (G t) (G t')+    | t == t' = +        True+expnHeldBy (G t) (G t')+    | isGroupVar t =+        elem (head (M.keys t)) (M.keys t')+expnHeldBy _ _ = False++-- The key used to decrypt an encrypted term, otherwise Nothing.+decryptionKey :: Term -> Maybe Term+decryptionKey (F Enc [_, t]) = Just (inv t)+decryptionKey _ = Nothing++buildable :: Set Term -> Set Term -> Term -> Bool+buildable knowns unguessable term =+    ba term+    where+      ba (I _) = True           -- A mesg sorted variable is always buildable+      ba (F Base [I _]) = True  -- as is a base sorted variable+      ba (C _) = True           -- So is a tag+      ba (F Cat [t0, t1]) =+          ba t0 && ba t1+      ba t@(F Enc [t0, t1]) =+          S.member t knowns || ba t0 && ba t1+      ba (F Base [t]) = bb t+      ba t = isAtom t && not (S.member t unguessable)+      -- Buildable base term+      bb (I _) = True           -- A variable of sort base is always buildable+      bb (F Genr []) = True     -- and so in the generator+      bb t@(F Exp [t0, G t1]) =+          S.member (F Base [t]) knowns || ba t0 && be t1+      bb _ = False+      -- Buildable exponent+      be t = buildableExponent t +             [ g | t <- S.elems unguessable, g <- getGroup t ]++getGroup :: Term -> [Group]+getGroup (G t) = [t]+getGroup _ = []++-- BROKEN.  VERY BROKEN++-- Just try all the possibilities.+buildableExponent :: Group -> [Group] -> Bool+buildableExponent t unguessables =+    elem t (filteredLevel size)+    where+      size = sum (0 : M.elems t)+      filteredLevel n = L.filter (flip notElem unguessables) (level n)+      level n | n <= 0 = []+              | n == 1 = usefulKnowns+              | otherwise =+                  usefulKnowns ++ [ mul k k' |+                                    k <- usefulKnowns,+                                    k' <- filteredLevel (n - 1) ]+      usefulKnowns = L.filter (flip notElem unguessables) +                     (map (flip M.singleton 1) (M.keys t))++-- Compute the decomposition given some known terms and some unguessable+-- atoms.  The code is quite tricky.  It iterates until the known+-- terms don't change.  The known terms ends up with all the+-- encryptions that are known.+decompose :: Set Term -> Set Term -> (Set Term, Set Term)+decompose knowns unguessable =+    loop unguessable knowns S.empty []+    where+      loop unguessable knowns old []+          | old == knowns = (knowns, unguessable) -- Done+          | otherwise = loop unguessable knowns knowns (S.elems knowns)+      loop unguessable knowns old (t@(F Cat _) : todo) =+          loop unguessable (decat t (S.delete t knowns)) old todo+      loop unguessable knowns old ((F Enc [t0, t1]) : todo)+          | buildable knowns unguessable (inv t1) = -- Add plaintext+              loop unguessable (decat t0 knowns) old todo+          | otherwise = loop unguessable knowns old todo+      -- New case here: don't delete exponentiated values+      loop unguessable knowns old (F Base [F Exp [_, _]] : todo) =+          loop unguessable knowns old todo+      loop unguessable knowns old (t : todo) =+          loop (S.delete t unguessable) (S.delete t knowns) old todo+      -- Decat+      decat (F Cat [t0, t1]) s = decat t1 (decat t0 s)+      decat t s = S.insert t s++-- Inverts an asymmetric key+inv :: Term -> Term+inv (F Akey [F Invk [t]]) = F Akey [t]+inv (F Akey [t]) = F Akey [F Invk [t]]+inv (I _) = error "Algebra.inv: Cannot invert a variable of sort mesg"+inv t = t++-- Extracts every encryption that is carried by a term along with its+-- encryption key.+encryptions :: Term -> [(Term, [Term])]+encryptions t =+    reverse $ loop t []+    where+      loop (F Cat [t, t']) acc =+          loop t' (loop t acc)+      loop t@(F Enc [t', t'']) acc =+          loop t' (adjoin (t, [t'']) acc)+      loop t@(F Base [F Exp [_, G t'']]) acc =+          adjoin (t, map groupVar (M.keys t'')) acc+      loop _ acc = acc+      adjoin x xs+          | x `elem` xs = xs+          | otherwise = x : xs++-- Returns the encryptions that carry the target.  If the target is+-- carried outside all encryptions, or is exposed because a decription+-- key is derivable, Nothing is returned.+protectors :: (Term -> Bool) -> Term -> Term -> Maybe [Term]+protectors derivable target source =+    do+      ts <- bare source S.empty+      return $ S.elems ts+    where+      bare source _+          | source == target = Nothing+      bare (F Cat [t, t']) acc =+          maybe Nothing (bare t') (bare t acc)+      bare t@(F Enc [t', key]) acc =+          if target `heldBy` t' then+              if derivable (inv key) then+                  bare t' acc+              else+                  Just (S.insert t acc)+          else+              Just acc+      bare t@(F Base [F Exp [_, t'']]) acc+          | target == t'' = Just (S.insert t acc)+      bare _ acc = Just acc++-- Support for data flow analysis of traces.  A flow rule maps an+-- initial set of atoms and a set of available terms to sets of pairs+-- of the same sets.+type FlowRule = (Set Term, Set Term) -> Set (Set Term, Set Term)++-- Combine flow rules sequentially.+comb :: FlowRule -> FlowRule -> FlowRule+comb f g x =+    S.fold h S.empty (g x)+    where+      h a s = S.union (f a) s++-- Analyze a term as a sent term.+outFlow :: Term -> FlowRule+outFlow t a@(_, available)+    | S.member t available = S.singleton a+outFlow (I _) _ = S.empty+outFlow (C _) a = S.singleton a+outFlow (F Cat [t0, t1]) a =    -- Construct non-atoms+    comb (outFlow t1) (outFlow t0) a+outFlow (F Enc [t0, t1]) a =+    comb (outFlow t1) (outFlow t0) a+outFlow t (initial, available) = -- Don't look inside atoms+    S.singleton (S.insert t initial, S.insert t available)++-- Analyze a term as a received term.+inFlow :: Term -> FlowRule+inFlow (C _) a = S.singleton a+inFlow (F Cat [t0, t1]) a =     -- Try to receive components+    S.union                     -- in both orders+         (comb (inFlow t1) (inFlow t0) a)+         (comb (inFlow t0) (inFlow t1) a)+inFlow t@(F Enc [t0, t1]) (initial, available) =+    S.union                     -- Encryption can be built+         (outFlow t (initial, available)) -- or decrypted+         (comb (inFlow t0) (outFlow (inv t1)) a)+    where                       -- Derive decryption key first+      a = (initial, S.insert t available)+inFlow t (initial, available) =+    S.singleton (initial, S.insert t available)++instance C.Term Term where+    isVar = isVar+    isAtom = isAtom+    termsWellFormed = termsWellFormed+    occursIn = occursIn+    foldVars = foldVars+    foldCarriedTerms = foldCarriedTerms+    carriedBy = carriedBy+    heldBy = heldBy+    decryptionKey = decryptionKey+    decompose = decompose+    buildable = buildable+    encryptions = encryptions+    protectors = protectors+    outFlow = outFlow+    inFlow = inFlow+    loadTerm = loadTerm++-- Places++-- A place names a one subterm within a term.  It is a list of+-- integers giving a path through a term to that named subterm.  Each+-- integer in the list identifies the subterm in a function+-- application on the path to the named subterm.  The integer is the+-- index of the subterm in the application's list of terms.++-- The places and replace code fail to find the variable+-- (F Akey [I x]) in (F Akey [Invk [I x]]).++newtype Place = Place [Int] deriving Show++-- Returns the places a variable occurs within a term.+places :: Term -> Term -> [Place]+places var source =+    f [] [] source+    where+      f paths path source+          | var == source = Place (reverse path) : paths+      f paths path (F _ u) =+          g paths path 0 u+      f paths path (G t) =+          groupPlaces (varId var) paths path 0 (linearize t)+      f paths _ _ = paths+      g paths _ _ [] = paths+      g paths path i (t : u) =+          g (f paths (i: path) t) path (i + 1) u++linearize :: Group -> [Id]+linearize t =+    do+      (x, n) <- M.assocs t+      replicate (if n >= 0 then n else negate n) x++groupPlaces ::  Id -> [Place] -> [Int] -> Int -> [Id] -> [Place]+groupPlaces _ paths _ _ [] = paths+groupPlaces x paths path i (y:ys) =+    let paths' = if x == y then+                     Place (reverse (i : path)) : paths+                 else paths in+    groupPlaces x paths' path (i + 1) ys++-- Returns the places a term is carried by another term.+carriedPlaces :: Term -> Term -> [Place]+carriedPlaces target source =+    f [] [] source+    where+      f paths path source+          | target == source = Place (reverse path) : paths+      f paths path (F Cat [t, t']) =+	  f (f paths  (0 : path) t) (1 : path) t'+      f paths path (F Enc [t, _]) =+	  f paths (0 : path) t+      f paths _ _ = paths++-- Replace a variable within a term at a given place.+replace :: Term -> Place -> Term -> Term+replace var (Place ints) source =+    loop ints source+    where+      loop [] _ = var+      loop (i : path) (F s u) =+          F s (C.replaceNth (loop path (u !! i)) i u)+      loop [i] (G t) =+          groupReplace (varId var) i (factors t)+      loop _ _ = error "Algebra.replace: Bad path to term"++factors :: Group -> [(Id, Int)]+factors t =+    do+      (x, n) <- M.assocs t+      case n >= 0 of+        True -> replicate n (x, 1)+        False -> replicate (negate n) (x, -1)++groupReplace :: Id -> Int -> [(Id, Int)] -> Term+groupReplace x i factors =+    let (_, n) = factors !! i in+    G $ group $ C.replaceNth (x, n) i factors++-- Return the ancestors of the term at the given place.+ancestors :: Term -> Place -> [Term]+ancestors source (Place ints) =+    loop [] ints source+    where+      loop ts [] _ = ts+      loop ts (i: path) t@(F _ u) =+          loop (t : ts) path (u !! i)+      loop ts [_] t@(G _) = t : ts+      loop _ _ _ = error "Algebra.ancestors: Bad path to term"++instance C.Place Term Place where+    places = places+    carriedPlaces = carriedPlaces+    replace = replace+    ancestors = ancestors++-- Rename the identifiers in a term.  Gen keeps the state of the+-- renamer.  (Question: should alist be replaced by a Map?)+clone :: Gen -> Term -> (Gen, Term)+clone gen t =+    (gen', t')+    where+      (_, gen', t') = cloneTerm ([], gen) t+      cloneTerm (alist, gen) t =+          case t of             -- The association list maps+            I x ->              -- identifiers to identifier.+                case lookup x alist of+                  Just y -> (alist, gen, I y)+                  Nothing ->+                      let (gen', y) = cloneId gen x in+                      ((x, y) : alist, gen', I y)+            C c -> (alist, gen, C c)+            F sym u ->+                let (alist', gen', u') =+                        foldl cloneTermList (alist, gen, []) u in+                (alist', gen', F sym $ reverse u')+            G t ->+                let (alist', gen', ts) =+                        foldl cloneGroupList (alist, gen, []) (M.assocs t) in+                (alist', gen', G $ group ts)+      cloneTermList (alist, gen, u) t =+          let (alist', gen', t') = cloneTerm (alist, gen) t in+          (alist', gen', t' : u)+      cloneGroupList (alist, gen, ts) (x, n) =+          case lookup x alist of+            Just y -> (alist, gen, (y, n) : ts)+            Nothing ->+                let (gen', y) = cloneId gen x in+                ((x, y) : alist, gen', (y, n) : ts)++instance C.Gen Term Gen where+    origin = origin+    clone = clone+    loadVars = loadVars++-- Functions used in both unification and matching++type IdMap = Map Id Term++emptyIdMap :: IdMap+emptyIdMap = M.empty++-- Apply a substitution to a term+idSubst :: IdMap -> Term -> Term+idSubst subst (I x) =+    M.findWithDefault (I x) x subst+idSubst _ t@(C _) = t+idSubst subst (F Invk [t]) =+    case idSubst subst t of+      F Invk [t] -> t           -- (invk (invk x)) = x+      t -> F Invk [t]+idSubst subst (F Exp [t0, G t1]) =+    case idSubst subst t0 of    -- (exp (exp g x) y) = (exp g (mul x y))+      F Exp [t0', G t1'] ->+          idSubst subst (F Exp [t0', G $ mul t1' t1])+      t -> expSubst subst t t1+idSubst subst (F s u) =+    F s (map (idSubst subst) u)+idSubst subst (G t) =+    G $ groupSubst subst t++expSubst :: IdMap -> Term -> Group -> Term+expSubst subst t0 t1 =+    case groupSubst subst t1 of+      t1' | M.null t1' -> t0    -- (exp g (one)) = g+          | otherwise -> F Exp [t0, G t1']++groupSubst :: IdMap -> Group -> Group+groupSubst subst t =+    foldrWithKey f M.empty t+    where+      f x n t =+          mul (expg (groupLookup subst x) n) t++groupLookup :: IdMap -> Id -> Group+groupLookup subst x =+    case M.findWithDefault (groupVar x) x subst of+      G t -> t+      w -> error ("Algebra.groupLookup: Bad substitution: " +++                  show x ++ " -> " ++ show w)++showMap :: (Show a, Show b) => Map a b -> ShowS+showMap m =+    showAssocs (M.assocs m)+    where+      showAssocs [] = id+      showAssocs ((x,y):m) =+          showString "\n " . shows x . showString " -> " .+          shows y . showAssocs m++-- Unification and substitution++newtype Subst = Subst IdMap deriving (Eq, Ord)++instance Show Subst where+    showsPrec _ (Subst s) = showString "Subst (" . showMap s . showChar ')'++emptySubst :: Subst+emptySubst = Subst emptyIdMap++-- Apply a substitution created by unification+substitute :: Subst -> Term -> Term+substitute (Subst s) t =+    idSubst s t++-- Composition of substitutions++-- substitute (compose s0 s1) t = substitute s0 (substitute s1 t)++-- 1. apply s0 to range of s1 to obtain s2;+-- 2. remove bindings is s0 where domains of s0 and s1 overlap to form s3;+-- 3. remove trivial bindings from s2 to form s4; and+-- 4. take the union of s4 and s3.++compose :: Subst -> Subst -> Subst+compose (Subst s0) (Subst s1) =+    let s2 = M.map (substitute (Subst s0)) s1        -- Step 1+        s4 = M.filterWithKey nonTrivialBinding s2 in -- Step 3+    Subst (M.union s4 s0)       -- Steps 2 and 4, union is left-biased++nonTrivialBinding :: Id -> Term -> Bool+nonTrivialBinding x (I y) = x /= y+nonTrivialBinding _ _ = True++-- During unification, variables determined to be equal are collected+-- into an equivalence class.  Multiple lookups of each variable in+-- the internal representation of a substitution finds the canonical+-- representive of the class.  The chase function finds the current+-- canonical representitive.++-- Get the canonical representative of equivalent identifiers making use+-- of this algebra's axiom.+chase :: Subst -> Term -> Term+chase (Subst s) (I x) =+    case M.lookup x s of+      Nothing -> I x+      Just t -> chase (Subst s) t+chase s (F Invk [t]) = chaseInvk s t+chase s (F Exp [t0, G t1]) = chaseExp s t0 t1+chase _ t = t++chaseInvk :: Subst -> Term -> Term+chaseInvk (Subst s) (I x) =+    case M.lookup x s of+      Nothing -> F Invk [I x]+      Just t -> chaseInvk (Subst s) t+chaseInvk s (F Invk [t]) = chase s t+chaseInvk _ t = F Invk [t]++chaseExp :: Subst -> Term -> Group -> Term+chaseExp s t0 t1+    | M.null t1 = chase s t0+chaseExp s (I x) t1 =+    case chase s (I x) of+      F Exp [t0', G t1'] -> chaseExp s t0' (mul t1 t1')+      t0 -> F Exp [t0, G t1]+chaseExp s (F Exp [t0', G t1']) t1 =+    chaseExp s t0' (mul t1 t1')+chaseExp _ t0 t1 = F Exp [t0, G t1]++-- Does x occur in t?+occurs :: Id -> Term -> Bool+occurs x (I y) = x == y+occurs _ (C _) = False+occurs x (F _ u) = any (occurs x) u+occurs x (G t) = elem x (M.keys t)++type GenSubst = (Gen, Subst)++unifyChase :: Term -> Term -> GenSubst -> Maybe GenSubst+unifyChase t t' (g, s) = unifyTerms (chase s t) (chase s t') (g, s)++unifyTerms :: Term -> Term -> GenSubst -> Maybe GenSubst+unifyTerms (I x) (I y) (g, Subst s)+    | x == y = Just (g, Subst s)+    | otherwise = Just (g, Subst $ M.insert x (I y) s)+unifyTerms (I x) t (g, Subst s)+    | occurs x t = Nothing+    | otherwise = Just (g, Subst $ M.insert x t s)+unifyTerms t (I x) s = unifyTerms (I x) t s+unifyTerms (C c) (C c') s+    | c == c' = Just s+    | otherwise = Nothing+unifyTerms (F Invk [I x]) (F Pubk [I y]) s =+    unifyTerms (I x) (F Invk [F Pubk [I y]]) s+unifyTerms (F Invk [I x]) (F Pubk [C c, I y]) s =+    unifyTerms (I x) (F Invk [F Pubk [C c, I y]]) s+unifyTerms (F Pubk [I x]) (F Invk [I y]) s =+    unifyTerms (I y) (F Invk [F Pubk [I x]]) s+unifyTerms (F Pubk [C c, I x]) (F Invk [I y]) s =+    unifyTerms (I y) (F Invk [F Pubk [C c, I x]]) s+unifyTerms (F Exp [t0, G t1]) (F Exp [t0', G t1']) s =+    unifyExp t0 t1 t0' t1' s+unifyTerms (F sym u) (F sym' u') s+    | sym == sym' = unifyTermLists u u' s+    | otherwise = Nothing+unifyTerms (G t) (G t') s =+    Just $ unifyGroup t t' s+unifyTerms _ _ _ = Nothing++unifyExp :: Term -> Group -> Term -> Group -> GenSubst -> Maybe GenSubst+unifyExp t0 t1 t0' t1' s+    | t0 == t0' = Just $ unifyGroup t1 t1' s+unifyExp (I x) t1 t0' t1' (g, Subst s) =+    unifyExp (F Genr []) v t0' t1' (g', Subst s')+    where+      (g', id) = freshId g "x"+      v = mul t1 $ M.singleton id 1+      s' = M.insert x (F Exp [F Genr [], G v]) s+unifyExp (F Genr []) t1 (I x) t1' s =+    unifyExp (I x) t1' (F Genr []) t1 s+unifyExp _ _ _ _ _ = Nothing++unifyTermLists :: [Term] -> [Term] -> GenSubst -> Maybe GenSubst+unifyTermLists [] [] s = Just s+unifyTermLists (t : u) (t' : u') s =+    maybe Nothing (unifyTermLists u u') (unifyChase t t' s)+unifyTermLists _ _ _ = Nothing++unifyGroup :: Group -> Group -> GenSubst -> GenSubst+unifyGroup t0 t1 (g, Subst s) =+    case M.assocs (groupSubst s $ mul t0 $ invert t1) of+      [] ->+          (g, Subst s)+      t ->+          let bases = D.linDiophEq (map snd t) 0 in+          mkmgus (map fst t) bases (g, Subst s)++mkmgus :: [Id] -> [[Int]] -> GenSubst -> GenSubst+mkmgus vars [] (g, Subst s) = +    (g, Subst $ foldl f s vars)+    where+      f s v = M.insert v (G M.empty) s+mkmgus vars bases (g, Subst s) =+    (g'', Subst (foldr bind s (zip vars terms)))+    where+      trans = L.transpose bases+      -- Create a variable for each element of a row+      (g'', vars') = foldr genv (g, []) (head trans)+      -- Generate one variable (the first argument is used just to count)+      genv _ (g, vs) = (g', v:vs) where (g', v) = freshId g "u"+      -- Construct the terms from freshly generated variables+      terms = map (G . group . zip vars') trans+      -- Bind a variable to a term+      bind (v, t) s = M.insert v t s++-- The exported unifier converts the internal representation of a+-- substitution into the external form using chaseMap.++unify :: Term -> Term -> GenSubst -> Maybe GenSubst+unify t t' s =+    do+      (g, s) <- unifyChase t t' s+      return (g, chaseMap s)++-- Apply the chasing version of substitution to the range of s.++chaseMap :: Subst -> Subst+chaseMap (Subst s) =+    Subst $ M.map (substChase (Subst s)) s++-- A chasing version of substitution.++substChase :: Subst -> Term -> Term+substChase subst t =+    case chase subst t of+      t@(I _) -> t+      t@(C _) -> t+      F Invk [t] ->+          case substChase subst t of+            F Invk [t] -> t           -- Apply axiom+            t -> F Invk [t]+      F Exp [t0, G t1] ->+          case substChase subst t0 of+            F Exp [t0', G t1'] ->+                substChase subst (F Exp [t0', G $ mul t1' t1])+            t -> expChase subst t t1+      F s u ->+          F s (map (substChase subst) u)+      G t -> G $ groupChase subst t++expChase :: Subst -> Term -> Group -> Term+expChase subst t0 t1 =+    case groupChase subst t1 of+      t1' | M.null t1' -> t0+          | otherwise -> F Exp [t0, G t1']++groupChase :: Subst -> Group -> Group+groupChase (Subst subst) t = +    loop t+    where +      loop t =+          case groupSubst subst t of+            t' | t == t' -> t'+               | otherwise -> loop t'++-- more general than relation+-- s0 `lte` s1 if s1 = compose s2 s0 for some s2+moreGeneral :: GenSubst -> GenSubst -> Bool+moreGeneral (_, Subst s0) (_, Subst s1) =+    let dom = S.elems $ foldl idSet (M.keysSet s0) (M.elems s0) in+    loop dom emptyEnv+    where+      loop [] _ = True+      loop (x : xs) env =+          any (loop xs) (match (get x s0) (get x s1) env)+      get x env = M.findWithDefault (I x) x env++idSet :: Set Id -> Term -> Set Id+idSet set (I id) = S.insert id set+idSet set (C _) = set+idSet set (F _ u) = foldl idSet set u+idSet set (G t) = S.union (M.keysSet t) set++instance C.Subst Term Gen Subst where+   emptySubst = emptySubst+   substitute = substitute+   unify t t' s = maybe [] (: []) $ unify t t' s+   compose = compose+   moreGeneral = moreGeneral++-- Matching and instantiation++newtype Env = Env IdMap deriving (Eq, Ord)++instance Show Env where+    showsPrec _ (Env r) =+        showString "Env (" . showMap r . showChar ')'++-- An environment may contain an explicit identity mapping, whereas a+-- substitution is erroneous if it has one.++emptyEnv :: Env+emptyEnv = Env emptyIdMap++-- Apply a substitution created my matching+instantiate :: Env -> Term -> Term+instantiate (Env r) t = idSubst r t++-- Matching++-- The matcher has the property that when pattern P and term T match+-- then instantiate (match P T emptyEnv) P = T.+match ::  Term -> Term -> Env -> [Env]+match (I x) t (Env r) =+    case M.lookup x r of+      Nothing -> [Env (M.insert x t r)]+      Just t' -> if t == t' then [Env r] else []+match (C c) (C c') r = if c == c' then [r] else []+match (F Exp [t0, G t1]) (F Exp [t0', G t1']) r+      = matchExp t0 t1 t0' t1' r+match (F s u) (F s' u') r+    | s == s' = matchLists u u' r+match (F Invk [t]) t' r =+    match t (F Invk [t']) r+match (G t) (G t') (Env r) =+    do+      let (t0, t0') = merge t t' r+      r' <- matchGroup t0 t0'+      return (Env $ M.union r' r)+match _ _ _ = []++matchExp ::  Term -> Group -> Term -> Group -> Env -> [Env]+matchExp (I x) t1 t0' t1' r@(Env e) =+    case M.lookup x e of+      Just (F Exp [t0'', G t1''])+          | t0' == t0'' -> match (G t1) (G (mul t1' (invert t1''))) r+      _ -> matchLists [I x, G t1] [t0', G t1'] r+matchExp (F Genr []) t1 t0' t1' r =+    matchLists [F Genr [], G t1] [t0', G t1'] r+matchExp _ _ _ _ _ = error "Algebra.matchExp: Bad match term"++matchLists :: [Term] -> [Term] -> Env -> [Env]+matchLists [] [] r = [r]+matchLists (t : u) (t' : u') r =+  do+    r' <- match t t' r+    matchLists u u' r'+matchLists _ _ _ = []++-- Merge the results of applying the env to the left-hand side.+merge ::  Group -> Group -> IdMap -> (Group, Group)+merge t t' r =+    (group t0, t0')+    where+      (t0, t0') = loop (M.assocs t) ([], t')+      loop [] acc = acc+      loop (p@(x, n) : t0) (t1, t1') =+          case M.lookup x r of+            Nothing -> loop t0 (p : t1, t1')+            Just (G t) ->+                loop t0 (t1, mul (expg t (negate n)) t1')+            Just t ->+                error $ "Algebra.merge: expecting an expn but got " ++ show t++-- To perform matching in a Commutative Monoid, one must solve a+-- linear Diophantine equation.  For matching, the coefficients of the+-- equation are always positive, so there are no solutions the+-- homegeneous problem.  That means there is no need to generate fresh+-- variables as is required when performing matching in an Abelian+-- Group.++-- The substitions are sorted in an effort to favor mappings that+-- represent renamings.+matchGroup ::  Group -> Group -> [IdMap]+matchGroup t0 t1 =+    map (M.map G) $ sortMaps $ solveLinEqs (M.assocs t0) (M.assocs t1)++type Coeff = [(Id, Int)]+type IdGrpMap = Map Id Group++-- Variables on the RHS are treated as constants.  This routine+-- produces solutions that satisfy each variable on the RHS and merges+-- the solutions.+solveLinEqs :: Coeff -> Coeff -> [IdGrpMap]+solveLinEqs lhs [] =+    [M.fromList (map (\(v, _) -> (v, M.empty)) lhs)]+solveLinEqs lhs ((v, c):rhs) =+    [ M.unionWith mul env env' |+      env <- solveLinEq lhs v c,+      env' <- solveLinEqs lhs rhs ]++-- Solve the linear Diophantine equation for one variable on the RHS.+solveLinEq :: Coeff -> Id -> Int -> [IdGrpMap]+solveLinEq lhs var multiplicity =+    [ foldl toEnv M.empty (zip (map fst lhs) (tail solution))+      | solution <- D.linDiophEq (map snd lhs) multiplicity ]+    where+      toEnv env (v', 0) =       -- Map v' to one+          M.insert v' M.empty env+      toEnv env (v', c) =       -- Map v' to (mul var ...) c times+          M.insert v' (M.singleton var c) env++-- The maps are sorted in that mappings that represent renamings are+-- preferred.+sortMaps :: [IdGrpMap] -> [IdGrpMap]+sortMaps envs =+    L.sortBy cmp envs+    where+      cmp e0 e1 = compare (measure e0) (measure e1)+      measure e =+          if M.null e then+              0+          else+              maximum (map (sum . M.elems) (M.elems e))++-- Does every varible in ts not occur in the domain of e?+-- Trivial bindings in e are ignored.+identityEnvFor :: Env -> [Term] -> [Env]+identityEnvFor ge ts =+    let env@(Env r) = nonTrivialEnv ge in+    if all (allId $ flip S.notMember $ M.keysSet r) ts then+        [env]+    else+        []++allId :: (Id -> Bool) -> Term -> Bool+allId f (I x) = f x+allId _ (C _) = True+allId f (F _ u) = all (allId f) u+allId f (G t) = all f (M.keys t)++-- Eliminate all trivial bindings so that an environment can be used+-- as a substitution.+nonTrivialEnv :: Env -> Env+nonTrivialEnv (Env r) =+    nonGroupEnv (M.assocs r) M.empty+    where+      nonGroupEnv [] env =+          Env env+      nonGroupEnv ((x, I y):r) env+          | x == y = nonGroupEnv r env+      nonGroupEnv ((x, G y):r) env+          | isGroupVar y && varId (G y) == x =+              nonGroupEnv r env+      nonGroupEnv ((x, y):r) env =+          nonGroupEnv r (M.insert x y env)++-- Cast an environment into a substitution by filtering out trivial+-- bindings.++substitution :: Env -> Subst+substitution (Env r) =+    Subst $ M.filterWithKey nonTrivialBinding r++-- Add type information to an environment, and return it as a list of+-- associations.++reify :: [Term] -> Env -> [(Term, Term)]+reify domain (Env env) =+    map (loop domain) $ M.assocs env+    where+      loop [] (x, _) =+          error $ "Algebra.reify: variable missing from domain " ++ idName x+      loop (I x : _) (y, t)+          | x == y = (I x, t)+      loop (F Text [I x] : _) (y, t)+          | x == y = (F Text [I x], F Text [t])+      loop (F Data [I x] : _) (y, t)+          | x == y = (F Data [I x], F Data [t])+      loop (F Name [I x] : _) (y, t)+          | x == y = (F Name [I x], F Name [t])+      loop (F Skey [I x] : _) (y, t)+          | x == y = (F Skey [I x], F Skey [t])+      loop (F Akey [I x] : _) (y, t)+          | x == y = (F Akey [I x], F Akey [t])+      loop (F Base [I x] : _) (y, t)+          | x == y = (F Base [I x], F Base [t])+      loop (G x : _) (y, G t)+          | isGroupVar x && varId (G x) == y = (G x, G t)+      loop (_ : domain) pair = loop domain pair++-- Ensure the range of an environment contains only variables and that+-- the environment is injective.+matchRenaming :: Env -> Bool+matchRenaming (Env  e) =+    nonGrp S.empty (M.elems e)+    where+      nonGrp _ [] = True+      nonGrp s (I x:e) | not (S.member x s) =+          nonGrp (S.insert x s) e+      nonGrp s (G x:e) | isGroupVar x && not (S.member (varId $ G x) s) =+          nonGrp (S.insert (varId $ G x) s) e+      nonGrp _ _ = False++instance C.Env Term Gen Subst Env where+   emptyEnv = emptyEnv+   instantiate = instantiate+   match t t' (g, e) =+       map (\e -> (g, e)) $ match t t' e+   identityEnvFor (g, e) t = map (\e -> (g, e)) $ identityEnvFor e t+   specialize = id+   substitution = substitution+   reify = reify+   matchRenaming (_, e) = matchRenaming e++-- Term specific loading functions++loadVars :: Monad m => Gen -> [SExpr Pos] -> m (Gen, [Term])+loadVars gen sexprs =+    do+      pairs <- mapM loadVarPair sexprs+      (g, vars) <- foldM loadVar (gen, []) (concat pairs)+      return (g, reverse vars)++loadVarPair :: Monad m => SExpr Pos -> m [(SExpr Pos, SExpr Pos)]+loadVarPair (L _ (x:xs)) =+    let (t:vs) = reverse (x:xs) in+    return [(v,t) | v <- reverse vs]+loadVarPair x = fail (shows (annotation x) "Bad variable declaration")++loadVar :: Monad m => (Gen, [Term]) -> (SExpr Pos, SExpr Pos) ->+           m (Gen, [Term])+loadVar (gen, vars) (S pos name, S pos' sort) =+    case loadLookup pos vars name of+      Right _ ->+          fail (shows pos "Duplicate variable declaration for " ++ name)+      Left _ ->+          do+            let (gen', x) = freshId gen name+            p <- mkVar x+            return (gen', p : vars)+    where+      mkVar x =+          let t = I x in+          case sort of+            "mesg" -> return t+            "text" -> return $ F Text [t]+            "data" -> return $ F Data [t]+            "name" -> return $ F Name [t]+            "skey" -> return $ F Skey [t]+            "akey" -> return $ F Akey [t]+            "base" -> return $ F Base [t]+            "expn" -> return $ groupVar x+            _ -> fail (shows pos' "Sort " ++ sort ++ " not recognized")+loadVar _ (x,_) = fail (shows (annotation x) "Bad variable syntax")++loadLookup :: Pos -> [Term] -> String -> Either String Term+loadLookup pos [] name = Left (shows pos $ "Identifier " ++ name ++ " unknown")+loadLookup pos (t : u) name =+    let name' = idName (varId t) in+    if name' == name then Right t else loadLookup pos u name++loadLookupName :: Monad m => Pos -> [Term] -> String -> m Term+loadLookupName pos vars name =+    either fail f (loadLookup pos vars name)+    where+      f t@(F Name [I _]) = return t+      f _ = fail (shows pos $ "Expecting " ++ name ++ " to be a name")++loadLookupAkey :: Monad m => Pos -> [Term] -> String -> m Term+loadLookupAkey pos vars name =+    either fail f (loadLookup pos vars name)+    where+      f t@(F Akey [I _]) = return t+      f _ = fail (shows pos $ "Expecting " ++ name ++ " to be an akey")++-- Load term and check that it is well-formed.+loadTerm :: Monad m => [Term] -> SExpr Pos -> m Term+loadTerm vars (S pos s) =+    either fail return (loadLookup pos vars s)+loadTerm _ (Q _ t) =+    return (C t)+loadTerm vars (L pos (S _ s : l)) =+    case lookup s loadDispatch of+      Nothing -> fail (shows pos "Keyword " ++ s ++ " unknown")+      Just f -> f pos vars l+loadTerm _ x = fail (shows (annotation x) "Malformed term")++type LoadFunction m = Pos -> [Term] -> [SExpr Pos] -> m Term++loadDispatch :: Monad m => [(String, LoadFunction m)]+loadDispatch =+    [("pubk", loadPubk)+    ,("privk", loadPrivk)+    ,("invk", loadInvk)+    ,("ltk", loadLtk)+    ,("gen", loadGen)+    ,("exp", loadExp)+    ,("one", loadOne)+    ,("mul", loadMul)+    ,("cat", loadCat)+    ,("enc", loadEnc)+    ]++-- Atom constructors: pubk privk invk ltk++loadPubk :: Monad m => LoadFunction m+loadPubk _ vars [S pos s] =+    do+      t <- loadLookupName pos vars s+      return $ F Akey [F Pubk [I $ varId t]]+loadPubk _ vars [Q _ c, S pos s] =+    do+      t <- loadLookupName pos vars s+      return $ F Akey [F Pubk [C c, I $ varId t]]+loadPubk pos _ _ = fail (shows pos "Malformed pubk")++loadPrivk :: Monad m => LoadFunction m+loadPrivk _ vars [S pos s] =+    do+      t <- loadLookupName pos vars s+      return $ F Akey [F Invk [F Pubk [I $ varId t]]]+loadPrivk _ vars [Q _ c, S pos s] =+    do+      t <- loadLookupName pos vars s+      return $ F Akey [F Invk [F Pubk [C c, I $ varId t]]]+loadPrivk pos _ _ = fail (shows pos "Malformed privk")++loadInvk :: Monad m => LoadFunction m+loadInvk _ vars [S pos s] =+    do+      t <- loadLookupAkey pos vars s+      return $ F Akey [F Invk [I $ varId t]]+loadInvk pos _ _ = fail (shows pos "Malformed invk")++loadLtk :: Monad m => LoadFunction m+loadLtk _ vars [S pos s, S pos' s'] =+    do+      t <- loadLookupName pos vars s+      t' <- loadLookupName pos' vars s'+      return $ F Skey [F Ltk [I $ varId t, I $ varId t']]+loadLtk pos _ _ = fail (shows pos "Malformed ltk")++-- Base and exponents++loadGen :: Monad m => LoadFunction m+loadGen _ _ [] =+    return $ F Base [F Genr []]+loadGen pos _ _ = fail (shows pos "Malformed gen")++loadExp :: Monad m => LoadFunction m+loadExp _ vars [x, x'] =+    do+      t <- loadBase vars x+      t' <- loadExpn vars x'+      return $ F Base [idSubst emptyIdMap $ F Exp [t, G t']]+loadExp pos _ _ = fail (shows pos "Malformed exp")++loadBase :: Monad m => [Term] -> SExpr Pos -> m Term+loadBase vars x =+    do+      t <- loadTerm vars x+      case t of+        F Base [t] -> return t+        _ -> fail (shows (annotation x) "Malformed base")++loadExpn :: Monad m => [Term] -> SExpr Pos -> m Group+loadExpn vars x =+    do+      t <- loadTerm vars x+      case t of+        G t -> return t+        _ -> fail (shows (annotation x) "Malformed expn")++loadOne :: Monad m => LoadFunction m+loadOne _ _ [] =+    return $ G M.empty+loadOne pos _ _ = fail (shows pos "Malformed one")++loadMul :: Monad m => LoadFunction m+loadMul _ vars xs =+    do+      t <- foldM f M.empty xs+      return $ G t+    where+      f acc x =+          do+            t <- loadExpn vars x+            return $ mul t acc++-- Term constructors: cat enc++loadCat :: Monad m => LoadFunction m+loadCat _ vars (l : ls) =+    do+      ts <- mapM (loadTerm vars) (l : ls)+      return $ foldr1 (\a b -> F Cat [a, b]) ts+loadCat pos _ _ = fail (shows pos "Malformed cat")++loadEnc :: Monad m => LoadFunction m+loadEnc pos vars (l : l' : ls) =+    do+      let (butLast, last) = splitLast l (l' : ls)+      t <- loadCat pos vars butLast+      t' <- loadTerm vars last+      return $ F Enc [t, t']+loadEnc pos _ _ = fail (shows pos "Malformed enc")++splitLast :: a -> [a] -> ([a], a)+splitLast x xs =+    loop [] x xs+    where+      loop z x [] = (reverse z, x)+      loop z x (y : ys) = loop (x : z) y ys++-- Term specific displaying functions++newtype Context = Context [(Id, String)] deriving Show++displayVars :: Context -> [Term] -> [SExpr ()]+displayVars _ [] = []+displayVars ctx vars =+    let (v,t):pairs = map (displayVar ctx) vars in+    loop t [v] pairs+    where+      loop t vs [] = [L () (reverse (t:vs))]+      loop t vs ((v',t'):xs)+          | t == t' = loop t (v':vs) xs+          | otherwise = L () (reverse (t:vs)):loop t' [v'] xs++displayVar :: Context -> Term -> (SExpr (), SExpr ())+displayVar ctx (I x) = displaySortId "mesg" ctx x+displayVar ctx (F Text [I x]) = displaySortId "text" ctx x+displayVar ctx (F Data [I x]) = displaySortId "data" ctx x+displayVar ctx (F Name [I x]) = displaySortId "name" ctx x+displayVar ctx (F Skey [I x]) = displaySortId "skey" ctx x+displayVar ctx (F Akey [I x]) = displaySortId "akey" ctx x+displayVar ctx (F Base [I x]) = displaySortId "base" ctx x+displayVar ctx t@(G x)+    | isGroupVar x = displaySortId "expn" ctx (varId t)+displayVar _ _ =+    error "Algebra.displayVar: term not a variable with its sort"++displaySortId :: String -> Context -> Id -> (SExpr (), SExpr ())+displaySortId sort ctx x = (displayId ctx x, S () sort)++displayId :: Context -> Id -> SExpr ()+displayId (Context ctx) x =+    case lookup x ctx of+      Nothing ->+          let msg = idName x ++ " in a display context" in+          error $ "Algebra.displayId: Cannot find variable " ++ msg+      Just name -> S () name++displayTerm :: Context -> Term -> SExpr ()+displayTerm ctx (I x) = displayId ctx x+displayTerm ctx (F Text [I x]) = displayId ctx x+displayTerm ctx (F Data [I x]) = displayId ctx x+displayTerm ctx (F Name [I x]) = displayId ctx x+displayTerm ctx (F Skey [I x]) = displayId ctx x+displayTerm ctx (F Skey [F Ltk [I x, I y]]) =+    L () [S () "ltk", displayId ctx x, displayId ctx y]+displayTerm ctx (F Akey [t]) =+    case t of+      I x -> displayId ctx x+      F Invk [I x] -> L () [S () "invk", displayId ctx x]+      F Pubk [I x] -> L () [S () "pubk", displayId ctx x]+      F Pubk [C c, I x] -> L () [S () "pubk", Q () c, displayId ctx x]+      F Invk [F Pubk [I x]] -> L () [S () "privk", displayId ctx x]+      F Invk [F Pubk [C c, I x]] ->+          L () [S () "privk", Q () c, displayId ctx x]+      _ -> error ("Algebra.displayAkey: Bad term " ++ show t)+displayTerm ctx (F Base [t]) =+    displayBase t+    where+      displayBase (I x) = displayId ctx x+      displayBase (F Genr []) =+          L () [S () "gen"]+      displayBase (F Exp [t0, G t1]) =+          L () [S () "exp", displayBase t0, displayTerm ctx (G t1)]+      displayBase t = error ("Algebra.displayBase: Bad term " ++ show t)+displayTerm ctx (G t) =+    displayExpn t+    where+      displayExpn t+          | M.null t = L () [S () "one"]+          | otherwise =+              case factors t of+                [f] -> displayFactor f+                fs -> L () (S () "mul" : map displayFactor fs)+      displayFactor (x, n)+          | n >= 0 = displayId ctx x+          | otherwise = error ("Algebra.displayTerm: Bad factor " ++ show t)+displayTerm _ (C t) = Q () t+displayTerm ctx (F Cat [t0, t1]) =+    L () (S () "cat" : displayTerm ctx t0 : displayList ctx t1)+displayTerm ctx (F Enc [t0, t1]) =+    L () (S () "enc" : displayEnc ctx t0 t1)+displayTerm _ t = error ("Algebra.displayTerm: Bad term " ++ show t)++displayList :: Context -> Term -> [SExpr ()]+displayList ctx (F Cat [t0, t1]) = displayTerm ctx t0 : displayList ctx t1+displayList ctx t = [displayTerm ctx t]++displayEnc :: Context -> Term -> Term -> [SExpr ()]+displayEnc ctx (F Cat [t0, t1]) t = displayTerm ctx t0 : displayEnc ctx t1 t+displayEnc ctx t0 t1 = [displayTerm ctx t0, displayTerm ctx t1]++displayEnv :: Context -> Context -> Env -> [SExpr ()]+displayEnv ctx ctx' (Env r) =+    map (\(x, t) -> L () [displayTerm ctx x, displayTerm ctx' t]) r'+    where+      r' = map (\(x, t) -> (I x, inferSort t)) $ M.assocs r++-- displaySubst c s displays a substitution s in context c, where some+-- variables that occur in s might not be in c.  Enough sort+-- inference is performed so as to allow the extension of the context.+displaySubst :: Context -> Subst -> [SExpr ()]+displaySubst ctx s@(Subst r) =+    map (\(x, t) -> L () [displayTerm ctx' x, displayTerm ctx' t]) r'+    where+      r' = map (\(x, t) -> (I x, inferSort (substitute s t))) $ M.assocs r+      ctx' = foldl (\ctx (x, t) -> addToContext ctx [x, t]) ctx r'++inferSort :: Term -> Term+inferSort t@(F Invk _) = F Akey [t]+inferSort t@(F Pubk _) = F Akey [t]+inferSort t@(F Ltk _) = F Skey [t]+inferSort t@(F Genr _) = F Base [t]+inferSort t@(F Exp _) = F Base [t]+inferSort t = t++emptyContext :: Context+emptyContext = Context []++-- Generate names for output renaming as necessary.+-- Assumes the input is a list of term that are well-formed+addToContext :: Context -> [Term] -> Context+addToContext ctx u =+    foldl (foldVars varContext) ctx u++varContext :: Context -> Term -> Context+varContext ctx t =+    let x = varId t+        name = rootName $ idName x in+    if hasId ctx x then+        ctx+    else+        if hasName ctx name then+            extendContext ctx x (genName ctx name)+        else+            extendContext ctx x name++hasId :: Context -> Id -> Bool+hasId (Context ctx) id =+    maybe False (const True) (lookup id ctx)++hasName :: Context -> String -> Bool+hasName (Context ctx) name =+    maybe False (const True) (L.find ((name ==) . snd) ctx)++extendContext :: Context -> Id -> String -> Context+extendContext (Context ctx) x name =+    Context $ (x, name) : ctx++genName :: Context -> String -> String+genName ctx name =+    loop 0+    where+      root = '-' : reverse name+      loop :: Int -> String+      loop n =+          let name' = revapp root (show n) in+          if hasName ctx name' then+              loop (n + 1)+          else+              name'+      revapp [] s = s+      revapp (c : cs) s = revapp cs (c : s)++rootName :: String -> String+rootName name =+    noHyphen 0 name+    where+      noHyphen _ [] = name+      noHyphen i (c : s)+          | c == '-' = hyphen i (i + 1) s+          | otherwise = noHyphen (i + 1) s+      hyphen i _ [] = rootName $ take i name+      hyphen i j (c : s)+          | isDigit c  = hyphen i (j + 1) s+          | otherwise = noHyphen j (c : s)++instance C.Context Term Gen Subst Env Context where+    emptyContext = emptyContext+    addToContext = addToContext+    displayVars = displayVars+    displayTerm = displayTerm+    displayEnv = displayEnv+    displaySubst = displaySubst++instance C.Algebra Term Place Gen Subst Env Context
+ src/CPSA/DiffieHellmanNoReciprocal/LinDiophEq.hs view
@@ -0,0 +1,168 @@+-- Linear Diophantine Equation solver+--+-- Copyright (c) 2009 The MITRE Corporation+--+-- This program is free software: you can redistribute it and/or+-- modify it under the terms of the BSD License as published by the+-- University of California.++-- |+-- Module      : CPSA.DiffieHellmanNoReciprocal.LinDiophEq+-- Copyright   : (C) 2009 John D. Ramsdell+-- License     : BSD+--+-- Linear Diophantine Equation solver.+--+-- The solver uses the algorithm of Contejean and Devie as specified+-- in \"An Efficient Incremental Algorithm for Solving Systems of+-- Linear Diophantine Equations\", Information and Computation+-- Vol. 113, pp. 143-174, 1994.+--+-- The algorithm for systems of homogeneous linear Diophantine+-- equations follows.  Let e[k] be the kth basis vector for 1 <= k <=+-- n.  To find the minimal, non-negative solutions M to the system of+-- equations sum(i=1,n,a[i]*v[i]) = 0, the algorithm of Contejean and+-- Devie is:+--+--  1. [init] A := {e[k] | 1 <= k <= n}; M := {}+--+--  2. [new minimal results] M := M + {a in A | a is a solution}+--+--  3. [unnecessary branches] A := {a in A | all m in M : some+--     1 <= k <= n : m[k] < a[k]}+--+--  4. [breadth-first search] A := {a + e[k] | a in A, 1 <= k <= n,+-- \<sum(i=1,n,a[i]*v[i]),v[k]> \< 0}+--+--  5. [test] If A = {}, stop, else go to 2.+--+-- This module provides a solver for a single linear Diophantine+-- equation a*v = b, where a and v are vectors, not matrices.+--+-- When solving an inhomogeneous equation, it uses the homogeneous+-- solver after adding -b as the first element of v and by bounding+-- the first element of a to be one at each step in the computation.+-- The first element of a solution is zero if it is a solution to the+-- associated homogeneous equation, and one if it is a solution to the+-- inhomogeneous equation.+--+-- The algorithm is likely to be Fortenbacher's algorithm, the one+-- generalized to systems of equations by Contejean and Devie, but I+-- have not been able to verified this fact.++module CPSA.DiffieHellmanNoReciprocal.LinDiophEq (linDiophEq) where++import Data.Array+import Data.Set (Set)+import qualified Data.Set as S++{-- Debugging hack+import System.IO.Unsafe++z :: Show a => a -> b -> b+z x y = seq (unsafePerformIO (print x)) y++zz :: Show a => a -> a+zz x = z x x++pr :: Set (Vector Int) -> [[Int]]+pr s = map elems $ S.toList s++zzz :: Set (Vector Int) -> Set (Vector Int)+zzz s = z (pr s) s+--}++type Vector a = Array Int a++vector :: Int -> [a] -> Vector a+vector n elems =+    listArray (0, n - 1) elems++-- | The 'linDiophEq' function takes a list of integers that specifies+-- the coefficients of linear Diophantine equation and a constant,+-- and returns the equation's minimal, non-negative solutions.+--+-- When solving an inhomogeneous equation, the first element of a+-- solution is zero if it solves the associated homogeneous equation,+-- and one otherwise.+--+-- Thus to solve 2x + y - z = 2, use+--+-- @+-- linDiophEq [2,1,-1] 2 = [[0,0,1,1],[1,1,0,0],[0,1,0,2],[1,0,2,0]]+-- @+--+-- The two minimal solutions to the homogeneous equation are [0,1,1]+-- and [1,0,2], so any linear combinations of these solutions+-- contributes to a solution.  The solution that corresponds to+-- [1,0,0] is x = w + 1, y = v, and z = v + 2w.  The solution that+-- corresponds to [0,2,0] is x = w, y = v + 2, and z = v + 2w.++linDiophEq :: [Int] -> Int -> [[Int]]+linDiophEq [] _ = []+linDiophEq v 0 =+    newMinimalResults True (vector n v) (basis n) S.empty+    where n = length v+linDiophEq v c =+    newMinimalResults False (vector n (negate c:v)) (basis n) S.empty+    where n = 1 + length v++-- Construct the basis vectors for an n-dimensional space+basis :: Int -> Set (Vector Int)+basis n =+    S.fromList [ z // [(k, 1)] | k <- indices z ]+    where z = vector n $ replicate n 0++-- This is the main loop.++-- Add elements of a that solve the equation to m and the output+-- Variable hom is true when solving a homogeneous equation+newMinimalResults :: Bool -> Vector Int -> Set (Vector Int) ->+                     Set (Vector Int) -> [[Int]]+newMinimalResults _ _ a _ | S.null a = []+newMinimalResults hom v a m =+    loop m (S.toList a)         -- Test each element in a+    where+      loop m [] =               -- When done, prepare for next iteration+          let a' = unnecessaryBranches a m+              a'' = breadthFirstSearch hom v a' in+          newMinimalResults hom v a'' m+      loop m (x:xs)+           | prod v x == 0 && S.notMember x m =+               elems x:loop (S.insert x m) xs -- Answer found+           | otherwise =+               loop m xs++-- Breadth-first search using the algorithm of Contejean and Devie+-- Variable hom is true when solving a homogeneous equation+breadthFirstSearch :: Bool -> Vector Int ->+                      Set (Vector Int) -> Set (Vector Int)+breadthFirstSearch hom v a =+    S.fold f S.empty a+    where+      f x acc =+          foldl (flip S.insert) acc+            [ x // [(k, x!k + 1)] |+              k <- indices x,   -- When not hom, bound first element+              hom || k > 0 || x!k == 0, -- of x to be no more than one+              prod v x * v!k < 0 ] -- Fortenbacher contribution++-- Inner product+prod :: Vector Int -> Vector Int -> Int+prod x y =+    sum [ x!i * y!i | i <- indices x ]++-- Remove unnecessary branches.  A test vector is not necessary if all+-- of its elements are greater than or equal to the elements of some+-- minimal solution.+unnecessaryBranches :: Set (Vector Int) -> Set (Vector Int) -> Set (Vector Int)+unnecessaryBranches a m =+    S.filter f a+    where+      f x = all (g x) (S.toList m)+      g x y = not (lessEq y x)++-- Compare vectors element-wise.+lessEq :: Vector Int -> Vector Int -> Bool+lessEq x y =+    all (\i-> x!i <= y!i) (indices x)
src/CPSA/Graph/Loader.hs view
@@ -13,7 +13,7 @@  module CPSA.Graph.Loader (Preskel, Vertex, protocol, role, env, inst,                           part, lastVertex, vertices, Node, vnode,-                          strands, label, parent, seen, unrealized,+                          strands, label, parent, seen, unrealized, shape,                           protSrc, preskelSrc, initial, strand, pos,                           prev, next, msg, out, succs, preds,                           State, loadFirst, loadNext)@@ -35,8 +35,9 @@       strands :: Int,           -- Number of strands       initial :: [Vertex],      -- The initial node in each strand       unrealized :: Maybe [Vertex], -- Nodes not realized if available-      protSrc :: SExpr Pos,       -- Source for the protocol-      preskelSrc :: SExpr Pos }   -- Source for this preskeleton+      shape :: Bool,            -- Is preskel ashape?+      protSrc :: SExpr Pos,     -- Source for the protocol+      preskelSrc :: SExpr Pos } -- Source for this preskeleton     deriving Show  instance Eq Preskel where@@ -250,6 +251,7 @@         False -> return ()       let heights = map (length . trace) insts       unrealized <- loadNodes heights (assoc "unrealized" xs)+      let shape = maybe False (const True) (assoc "shape" xs)       let orderings = maybe [] id (assoc "precedes" xs)       pairs <- loadOrderings heights orderings       let graph = adj heights pairs@@ -267,6 +269,7 @@                              strands = strands,                              initial = initial,                              unrealized = unrealized',+                             shape = shape,                              protSrc = src p,                              preskelSrc = s }             where
src/CPSA/Graph/SVG.hs view
@@ -99,6 +99,7 @@  data ButtonKind     = AliveTree                 -- tree node is alive+    | Shape                     -- tree node is alive and is a shape     | AliveDup                  -- duplicate node is alive     | DeadTree                  -- tree node is dead     | DeadDup                   -- duplication node is dead@@ -112,10 +113,12 @@                ("onclick", onclick conf label)]       style = italic kind [("text-anchor", "middle"), ("fill", color kind)]       color AliveTree = "black"+      color Shape = "blue"       color AliveDup = "green"       color DeadTree = "red"       color DeadDup = "orange"       italic AliveTree props = props+      italic Shape props = props       italic AliveDup props = ("font-style", "italic"):props       italic DeadTree props = props       italic DeadDup props = ("font-style", "italic"):props
src/CPSA/Graph/Tree.hs view
@@ -211,7 +211,7 @@     where       kind =           case (alive t, dup) of-            (True, False) -> AliveTree+            (True, False) -> if shape (vertex t) then Shape else AliveTree             (True, True) -> AliveDup             (False, False) -> DeadTree             (False, True) -> DeadDup
src/CPSA/Lib/Cohort.hs view
@@ -119,9 +119,12 @@ -- uniquely originate in this skeleton. avoid :: Algebra t p g s e c => Preskel t p g s e c -> (Set t, [t]) avoid k =-    (S.union (S.fromList (knon k)) (S.fromList u), u)+    (S.unions [ns, as, us], L.nub ((kpnon k) ++ u))     where+      ns = S.fromList (knon k)+      as = S.fromList (kpnon k)       u = uniqOrig k+      us = S.fromList u  -- Suppose k --v,p-> k', where k |-phi,sigma-> k'.  Let t=msg(k, v)@p, -- t'=sigma(t), T=sigma(esc(k, v, t)), and t"=msg(k', phi(v)).@@ -179,7 +182,6 @@  data Mode = Mode     { noGeneralization :: Bool,-      addDisplacements :: Bool,       nonceFirstOrder :: Bool,       visitOldStrandsFirst :: Bool,       reverseNodeOrder :: Bool }@@ -197,7 +199,7 @@       ss = strandVisitOrder mode (strands  k)       (a, u) = avoid k       whenRealized k =-          if noGeneralization mode then [] else realizedReductions k+          if noGeneralization mode then [] else maximize k  strandVisitOrder :: Mode -> [a] -> [a] strandVisitOrder mode ss =@@ -206,16 +208,6 @@     else         reverse ss     -- Visit recently added strands first (default) --- These reductions use isomorphism checking.-realizedReductions :: Algebra t p g s e c => Preskel t p g s e c ->-                      [Preskel t p g s e c]-realizedReductions k =-    let ks = maximize k in-    if null ks then             -- If k is a shape, collapse it-        collapse k-    else                        -- else generalize it-        ks- -- Returns the first Just value in a list or the default when there is -- none. firstJust :: [Maybe a] -> a -> a@@ -269,7 +261,7 @@                   places [] = loop cts -- Find position at which                   places (p : ps)      -- ct has escaped                       | isAncestorInSet escape t p = places ps-                      | otherwise = solveNode mode k ct p eks n t escape+                      | otherwise = solveNode k ct p eks n t escape       cts =                     -- Potential critical messages           if nonceFirstOrder mode then               map f (filter (flip heldBy t) u) ++@@ -307,14 +299,14 @@ -- Solve critical message at position pos at node n. -- ct = t @ pos -- t  = msg(k, n)-solveNode :: Algebra t p g s e c => Mode -> Preskel t p g s e c ->+solveNode :: Algebra t p g s e c => Preskel t p g s e c ->              t -> p -> [t] -> Node -> t -> Set t ->              [Preskel t p g s e c]-solveNode mode k ct pos eks n t escape =+solveNode k ct pos eks n t escape =     cons ++ augs ++ lsns     where       cons = contractions k ct pos eks n t escape cause-      augs = augmentations (addDisplacements mode) k ct pos eks n escape cause+      augs = augmentations k ct pos eks n escape cause       lsns = addListeners k ct pos eks n t escape cause       cause = Cause (dir eks) n ct escape @@ -377,22 +369,22 @@  -- Augmentations -augmentations :: Algebra t p g s e c => Bool -> Preskel t p g s e c ->+augmentations :: Algebra t p g s e c => Preskel t p g s e c ->                 t -> p -> [t] -> Node -> Set t ->                 Cause t p g s e c -> [Preskel t p g s e c]-augmentations displacement k ct pos eks n escape cause =+augmentations k ct pos eks n escape cause =     [ k' | r <- roles (protocol k),-           k' <- roleAugs displacement k ct pos eks n escape cause targets r ]+           k' <- roleAugs k ct pos eks n escape cause targets r ]     where       targets = S.toList (targetTerms ct escape) -roleAugs :: Algebra t p g s e c => Bool -> Preskel t p g s e c ->+roleAugs :: Algebra t p g s e c => Preskel t p g s e c ->             t -> p -> [t] -> Node -> Set t -> Cause t p g s e c ->             [t] -> Role t p g s e c -> [Preskel t p g s e c]-roleAugs displacement k ct pos eks n escape cause targets role =+roleAugs k ct pos eks n escape cause targets role =     [ k' | (subst', inst) <- transformingNode ct escape targets role subst,            (k', n', subst'') <--               augment displacement k n cause role subst' inst,+               augment k n cause role subst' inst,            maybeSolved ct pos eks escape k' n' subst'' ]     where       subst = cloneRoleVars (gen k) role
src/CPSA/Lib/Displayer.hs view
@@ -31,8 +31,9 @@           L () (S () "vars" : displayVars ctx vars) :           L () (S () "trace" : displayTrace ctx (rtrace r)) :           displayOptional "non-orig" (displayLenTerms ctx (rnon r))-          (displayOptional "uniq-orig" (displayTerms ctx (runique r))-           (rcomment r)))+          (displayOptional "pen-non-orig" (displayLenTerms ctx (rpnon r))+           (displayOptional "uniq-orig" (displayTerms ctx (runique r))+           (rcomment r))))     where       ctx = varsContext vars       vars = rvars r@@ -84,10 +85,11 @@ displayRest k ctx rest =     displayOptional "precedes" (displayOrdering (orderings k))      (displayOptional "non-orig" (displayTerms ctx (knon k))-      (displayOptional "uniq-orig" (displayTerms ctx (kunique k))-       (kcomment k ++-        (displayOperation k ctx-         (displayOptional "traces" traces rest)))))+      (displayOptional "pen-non-orig" (displayTerms ctx (kpnon k))+       (displayOptional "uniq-orig" (displayTerms ctx (kunique k))+        (kcomment k +++         (displayOperation k ctx+          (displayOptional "traces" traces rest))))))     where       traces = map (L () . displayTrace ctx . trace) (insts k)
src/CPSA/Lib/Entry.hs view
@@ -73,7 +73,6 @@       optAlg :: String,          -- Name of the algebra       optAnalyze :: Bool,        -- False when only expanding macros       optNoIsoChk :: Bool, -- True when not performing isomorphism checks-      optDisplacement :: Bool,     -- True when using displacement       optCheckNoncesFirst :: Bool, -- True when checking nonces first       optTryOldStrandsFirst :: Bool, -- True when visiting old strands first       optTryYoungNodesFirst :: Bool, -- True when visiting young nodes first@@ -89,7 +88,6 @@   optAlg = CPSA.Basic.Algebra.name,   optAnalyze = True,   optNoIsoChk = False,-  optDisplacement = True,   optCheckNoncesFirst = False,   optTryOldStrandsFirst = False,   optTryYoungNodesFirst = False,
src/CPSA/Lib/Loader.hs view
@@ -96,20 +96,23 @@       (gen, vars) <- loadVars gen vars       c <- loadTrace vars (evt : c)       n <- loadPosBaseTerms vars (assoc "non-orig" rest)+      a <- loadPosBaseTerms vars (assoc "pen-non-orig" rest)       u <- loadBaseTerms vars (assoc "uniq-orig" rest)-      comment <- alist ["non-orig", "uniq-orig"] rest+      comment <- alist ["non-orig", "pen-non-orig", "uniq-orig"] rest       let reverseSearch = hasKey "reverse-search" rest       let ts = tterms c-      case termsWellFormed (map snd n ++ u ++ ts) of+      case termsWellFormed (map snd n ++ map snd a ++ u ++ ts) of         False -> fail (shows pos "Terms in role not well formed")         True -> return ()       -- Drop unused variable declarations       let vs = L.filter (\v->elem v (varsInTerms ts)) vars       -- Drop rnons that refer to unused variable declarations       let ns = L.filter (varsSeen vs . snd) n+      -- Drop rpnons that refer to unused variable declarations+      let as = L.filter (varsSeen vs . snd) a       -- Drop runiques that refer to unused variable declarations       let us = L.filter (varsSeen vs) u-      let r = mkRole name vs c ns us comment reverseSearch+      let r = mkRole name vs c ns as us comment reverseSearch       case roleWellFormed r of         Return () -> return (gen, r)         Fail msg -> fail (shows pos $ showString "Role not well formed: " msg)@@ -140,8 +143,11 @@     do       failwith "a variable in non-orig is not in trace"                    $ varSubset (map snd $ rnon role) terms+      failwith "a variable in pen-non-orig is not in trace"+                   $ varSubset (map snd $ rpnon role) terms       mapM_ nonCheck $ rnon role       mapM_ lenCheck $ rnon role+      mapM_ lenCheck $ rpnon role       mapM_ uniqueCheck $ runique role       mapM_ origVarCheck $ rvars role       failwith "role trace is a prefix of a listener"@@ -320,10 +326,11 @@ loadInsts top p kvars gen insts xs =     do       _ <- alist [] xs          -- Check syntax of xs-      loadRest top kvars p gen (reverse insts) order nr ur kcomment+      loadRest top kvars p gen (reverse insts) order nr ar ur kcomment     where       order = assoc "precedes" xs       nr = assoc "non-orig" xs+      ar = assoc "pen-non-orig" xs       ur = assoc "uniq-orig" xs       comment = assoc "comment" xs       kcomment =@@ -374,9 +381,9 @@  loadRest :: (Algebra t p g s e c, Monad m) => Pos -> [t] ->             Prot t p g s e c -> g -> [Instance t p g s e c] ->-            [SExpr Pos] -> [SExpr Pos] -> [SExpr Pos] ->+            [SExpr Pos] -> [SExpr Pos] -> [SExpr Pos] -> [SExpr Pos] ->             [SExpr ()] -> m (Preskel t p g s e c)-loadRest pos vars p gen insts orderings nr ur comment =+loadRest pos vars p gen insts orderings nr ar ur comment =     do       case null insts of         True -> fail (shows pos "No strands")@@ -384,10 +391,11 @@       let heights = map height insts       o <- loadOrderings heights orderings       nr <- loadBaseTerms vars nr+      ar <- loadBaseTerms vars ar       ur <- loadBaseTerms vars ur-      let (nr', ur') = foldl addInstOrigs (nr, ur) insts-      let k = mkPreskel gen p insts o nr' ur' comment-      case termsWellFormed $ nr' ++ ur' ++ kterms k of+      let (nr', ar', ur') = foldl addInstOrigs (nr, ar, ur) insts+      let k = mkPreskel gen p insts o nr' ar' ur' comment+      case termsWellFormed $ nr' ++ ar' ++ ur' ++ kterms k of         False -> fail (shows pos "Terms in skeleton not well formed")         True -> return ()       case verbosePreskelWellFormed k of@@ -432,8 +440,9 @@           | otherwise = height xs (s - 1) loadNode _ x = fail (shows (annotation x) "Malformed node") -addInstOrigs :: Algebra t p g s e c => ([t], [t]) ->-                Instance t p g s e c -> ([t], [t])-addInstOrigs (nr, ur) i =+addInstOrigs :: Algebra t p g s e c => ([t], [t], [t]) ->+                Instance t p g s e c -> ([t], [t], [t])+addInstOrigs (nr, ar, ur) i =     (foldl (flip adjoin) nr $ inheritRnon i,+     foldl (flip adjoin) ar $ inheritRpnon i,      foldl (flip adjoin) ur $ inheritRunique i)
src/CPSA/Lib/Main.hs view
@@ -22,6 +22,7 @@ import CPSA.Lib.Reduction import qualified CPSA.Basic.Algebra import qualified CPSA.DiffieHellman.Algebra+import qualified CPSA.DiffieHellmanNoReciprocal.Algebra import qualified CPSA.SimpleDiffieHellman.Algebra  -- Default limit on the number of steps used to solve one problem.@@ -102,6 +103,7 @@ -- Algebra names algs :: [String] algs = [CPSA.Basic.Algebra.name, CPSA.DiffieHellman.Algebra.name,+        CPSA.DiffieHellmanNoReciprocal.Algebra.name,         CPSA.SimpleDiffieHellman.Algebra.name]  -- Select the algebra and go.@@ -114,6 +116,9 @@            | name == CPSA.DiffieHellman.Algebra.name ->                go name CPSA.DiffieHellman.Algebra.origin                   herald opts sexprs+           | name == CPSA.DiffieHellmanNoReciprocal.Algebra.name ->+               go name CPSA.DiffieHellmanNoReciprocal.Algebra.origin+                  herald opts sexprs            | name == CPSA.SimpleDiffieHellman.Algebra.name ->                go name CPSA.SimpleDiffieHellman.Algebra.origin                   herald opts sexprs@@ -153,9 +158,6 @@                 True -> writeComment h m $                         "Strand count bounded at " ++ show (optBound opts)                 False -> return ()-              case optDisplacement opts of-                True -> return ()-                False -> writeComment h m "Displacement disabled"               case optCheckNoncesFirst opts of                 True -> writeComment h m "Nonces checked first"                 False -> return ()@@ -188,7 +190,6 @@     | Margin String             -- Output line length     | Expand                    -- Expand macros only     | NoIsoChk                  -- Disable isomorphism checks-    | Displacement              -- Enable displacement     | CheckNoncesFirst          -- Check nonces first     | TryOldStrandsFirst        -- Try old strands first     | TryYoungNodesFirst        -- Try young nodes first@@ -211,8 +212,6 @@       "expand macros only; don't analyze",       Option ['n'] ["noisochk"] (NoArg NoIsoChk)       "disable isomorphism checks",-      Option ['d'] ["displacement"] (NoArg Displacement)-      "disable displacement",       Option ['c'] ["check-nonces"] (NoArg CheckNoncesFirst)       "check nonces first",       Option ['t'] ["try-old-strands"] (NoArg TryOldStrandsFirst)@@ -262,8 +261,6 @@           loop flags $ opts { optAnalyze = False }       loop (NoIsoChk : flags) opts =           loop flags $ opts { optNoIsoChk = True }-      loop (Displacement : flags) opts =-          loop flags $ opts { optDisplacement = False }       loop (CheckNoncesFirst : flags) opts =           loop flags $ opts { optCheckNoncesFirst = True }       loop (TryOldStrandsFirst : flags) opts =
src/CPSA/Lib/Protocol.hs view
@@ -8,9 +8,10 @@  module CPSA.Lib.Protocol (Event (..), evtTerm, evtMap, Trace, evt,     tterms, originates, originationPos, acquiredPos, usedPos, Role,-    rname, rvars, rtrace, rnon, runique, rcomment, rsearch, rnorig,-    ruorig, mkRole, varSubset, varsInTerms, addVars, Prot, mkProt,-    pname, alg, pgen, roles, varsAllAtoms, pcomment, flow) where+    rname, rvars, rtrace, rnon, rpnon, runique, rcomment, rsearch,+    rnorig, rpnorig, ruorig, mkRole, varSubset, varsInTerms, addVars,+    Prot, mkProt, pname, alg, pgen, roles, varsAllAtoms, pcomment,+    flow) where  import qualified Data.List as L import qualified Data.Set as S@@ -156,31 +157,35 @@       rtrace :: ![Event t p g s e c],       -- Set of non-originating atoms, possibly with a trace length       rnon :: ![(Maybe Int, t)], -- that says when to inherit the atom+      rpnon :: ![(Maybe Int, t)], -- that says when to inherit the atom       runique :: ![t],          -- Set of uniquely originating atoms       rcomment :: [SExpr ()],   -- Comments from the input       rsearch :: Bool, -- True when suggesting reverse test node search       rnorig :: [(t, Int)],     -- Nons plus origination position+      rpnorig :: [(t, Int)], -- Penetrator nons plus origination position       ruorig :: [(t, Int)] }    -- Uniques plus origination position     deriving Show  -- The empty role name is used with listener strands.  All roles in a -- protocol must have a name with more than one character. --- The lists vars, non, and unique are sets and should never contain--- duplicate terms.+-- The lists vars, non, pnon, and unique are sets and should never+-- contain duplicate terms.  -- Create a role-mkRole :: Algebra t p g s e c => String -> [t] ->-          Trace t p g s e c -> [(Maybe Int, t)] -> [t] ->+mkRole :: Algebra t p g s e c => String -> [t] -> Trace t p g s e c ->+          [(Maybe Int, t)] -> [(Maybe Int, t)] -> [t] ->           [SExpr ()] -> Bool -> Role t p g s e c-mkRole name vars trace non unique comment rev =+mkRole name vars trace non pnon unique comment rev =     Role { rname = name,            rvars = L.nub vars,  -- Every variable here must            rtrace = trace,      --  occur in the trace.            rnon = non,+           rpnon = pnon,            runique = L.nub unique,            rcomment = comment,            rnorig = map addNonOrig $ nonNub non,+           rpnorig = map addNonOrig $ nonNub pnon,            ruorig = map addUniqueOrig $ L.nub unique,            rsearch = rev          }
src/CPSA/Lib/Reduction.hs view
@@ -22,10 +22,16 @@ import CPSA.Lib.Cohort import CPSA.Lib.Displayer +-- Set when debugging an exception so that buffered results get out.+useFlush :: Bool+useFlush = False                -- True+ -- Parameter driven S-expression printer wrt :: Options -> Handle -> SExpr a -> IO () wrt p h sexpr =-    writeLnSEexpr h (optMargin p) sexpr+    do+      writeLnSEexpr h (optMargin p) sexpr+      if useFlush then hFlush h else return ()  -- A labeled and linked preskeleton data Algebra t p g s e c => LPreskel t p g s e c@@ -113,7 +119,7 @@         [k'] ->             if (gist k) == (gist k') then -- Input was a skeleton                 let lk' = LPreskel k' n Nothing in-                mode p h ks (n + optLimit p) (n + 1)+                begin p h ks (n + optLimit p) (n + 1)                          (hist (gist k', n)) [lk']             else                -- Input was not a skeleton                 do@@ -121,10 +127,30 @@                   wrt p h (commentPreskel lk [] (unrealized k) False                            "Not a skeleton")                   let lk' = LPreskel k' (n + 1) (Just lk)-                  mode p h ks (n + optLimit p) (n + 2)+                  begin p h ks (n + optLimit p) (n + 2)                            (hist (gist k', n + 1))  [lk']         _ -> error "Main.solve: can't handle more than one skeleton" +-- Begin by collapsing the point-of-view skeleton as much as possible.+begin :: Algebra t p g s e c => Options -> Handle ->+         [Preskel t p g s e c] -> Int -> Int -> Seen t p g s e c ->+         [LPreskel t p g s e c] -> IO ()+begin p h ks m n seen todo =+    search p h ks m n seen todo []++-- Apply collapse until all possibilities are exhausted.+search :: Algebra t p g s e c => Options -> Handle ->+            [Preskel t p g s e c] -> Int -> Int -> Seen t p g s e c ->+            [LPreskel t p g s e c] -> [LPreskel t p g s e c] -> IO ()+search p h ks m n seen [] done =+    mode p h ks m n seen (reverse done)+search p h ks m n seen (lk:todo) done =+    do+      let kids = collapse (content lk)+      let (n', seen', todo', _) =+              foldl (next lk) (n, seen, todo, []) kids+      search p h ks m n' seen' todo' (lk:done)+ -- Select reduction mode, noIsoChk or normal mode :: Algebra t p g s e c => Options -> Handle ->         [Preskel t p g s e c] -> Int -> Int -> Seen t p g s e c ->@@ -198,7 +224,6 @@ mkMode :: Options -> Mode mkMode p =     Mode { noGeneralization = optNoIsoChk p,-           addDisplacements = optDisplacement p,            nonceFirstOrder = optCheckNoncesFirst p,            visitOldStrandsFirst = optTryOldStrandsFirst p,            reverseNodeOrder = optTryYoungNodesFirst p}
src/CPSA/Lib/Strand.hs view
@@ -9,13 +9,13 @@ module CPSA.Lib.Strand (Instance, mkInstance, bldInstance, mkListener,     role, env, trace, height, listenerTerm, Sid, Node, mkPreskel,     firstSkeleton, Pair, Preskel, gen, protocol, insts, orderings,-    pov, knon, kunique, korig, kcomment, nstrands, kvars, kterms, uniqOrig,-    preskelWellFormed, verbosePreskelWellFormed, Strand, GraphStrand,-    inst, nodes, Vertex, GraphNode, preds, event, graphNode, strands,-    vertex, Gist, gist, contract, augment, inheritRnon,-    inheritRunique, addListener, Cause (..), Direction (..), Method-    (..), Operation (..), operation, prob, homomorphism, toSkeleton,-    generalize, collapse) where+    pov, knon, kpnon, kunique, korig, kcomment, nstrands, kvars,+    kterms, uniqOrig, preskelWellFormed, verbosePreskelWellFormed,+    Strand, GraphStrand, inst, nodes, Vertex, GraphNode, preds, event,+    graphNode, strands, vertex, Gist, gist, contract, augment,+    inheritRnon, inheritRpnon, inheritRunique, addListener, Cause+    (..), Direction (..), Method (..), Operation (..), operation,+    prob, homomorphism, toSkeleton, generalize, collapse) where  import Control.Monad import qualified Data.List as L@@ -70,6 +70,10 @@  -- Compile time switches for expermentation. +-- Enable hulling.+useHulling :: Bool+useHulling = False -- True+ -- Enable thinning, else use pruning. useThinning :: Bool useThinning = False -- True@@ -204,7 +208,7 @@               (g, Instance t p g s e c) mkListener gen term =     (gen'', Instance { role = mkRole "" vars [In rterm, Out rterm]-                              [] [] [] False,+                              [] [] [] [] False,                        env = env,                        trace = [In term, Out term],                        height = 2 })@@ -364,7 +368,7 @@           | otherwise = inner (p : orderings) True pairs rest       sameStrands (n0, n1) = strand n0 == strand n1 --- Preskeltons+-- Preskeletons  data Algebra t p g s e c => Preskel t p g s e c = Preskel     { gen :: !g,@@ -374,6 +378,7 @@       orderings :: ![Pair],       edges :: ![Edge t p g s e c],       knon :: ![t],             -- A list of atoms+      kpnon :: ![t],            -- A list of atoms       kunique :: ![t],          -- A list of atoms       kcomment :: [SExpr ()],   -- Comments from the input       korig :: ![(t, [Node])],  -- This is an association list with a@@ -436,12 +441,13 @@ -- This version is exported for use by the loader.  This preskeleton -- must be consumed by firstSkeleton. mkPreskel :: Algebra t p g s e c => g -> Prot t p g s e c ->-             [Instance t p g s e c] -> [Pair] -> [t] -> [t] ->+             [Instance t p g s e c] -> [Pair] -> [t] -> [t] -> [t] ->              [SExpr ()] -> Preskel t p g s e c-mkPreskel gen protocol insts orderings non unique comment =+mkPreskel gen protocol insts orderings non pnon unique comment =     k { kcomment = comment }     where-      k = newPreskel gen protocol insts orderings non unique New prob Nothing+      k = newPreskel gen protocol insts orderings non pnon+          unique New prob Nothing       prob = strandids k        -- Fixed point on k is okay.  -- Strand functions@@ -468,10 +474,10 @@ -- originating term data is also filled in.  This version is used -- within this module. newPreskel :: Algebra t p g s e c => g -> Prot t p g s e c ->-             [Instance t p g s e c] -> [Pair] -> [t] -> [t] ->+             [Instance t p g s e c] -> [Pair] -> [t] -> [t] -> [t] ->              Operation t p g s e c -> [Sid] ->              Maybe (Preskel t p g s e c) -> Preskel t p g s e c-newPreskel gen protocol insts orderings non unique oper prob pov =+newPreskel gen protocol insts orderings non pnon unique oper prob pov =     let orderings' = L.nub orderings         unique' = L.nub unique         g = graph trace height insts orderings'@@ -486,6 +492,7 @@                       orderings = orderings',                       edges = edges,                       knon = L.nub non,+                      kpnon = L.nub pnon,                       kunique = unique',                       kcomment = [],                       korig = orig,@@ -529,16 +536,18 @@       return t  -- A preskeleton is well formed if the ordering relation is acyclic,--- each atom declared to be uniquely-originating is carried in--- some preskeleton term, and every variable that occurs in each base--- term declared to be non-originating occurs in some preskeleton--- term, and the atom must never be carried by any term, and--- every uniquely originating role term mapped by an instance is--- mapped to a term that originates on the instance's strand.+-- each atom declared to be uniquely-originating is carried in some+-- preskeleton term, and every variable that occurs in each base term+-- declared to be non-originating or pen-non-originating occurs in+-- some preskeleton term, and the atom must never be carried by any+-- term, and every uniquely originating role term mapped by an+-- instance is mapped to a term that originates on the instance's+-- strand.  preskelWellFormed :: Algebra t p g s e c => Preskel t p g s e c -> Bool preskelWellFormed k =     varSubset (knon k) terms &&+    varSubset (kpnon k) terms &&     all nonCheck (knon k) &&     all uniqueCheck (kunique k) &&     wellOrdered k && acyclicOrder k &&@@ -563,6 +572,8 @@     do       failwith "a variable in non-orig is not in some trace"                    $ varSubset (knon k) terms+      failwith "a variable in pen-non-orig is not in some trace"+                   $ varSubset (kpnon k) terms       mapM_ nonCheck $ knon k       mapM_ uniqueCheck $ kunique k       failwith "ordered pairs not well formed" $ wellOrdered k@@ -673,11 +684,13 @@       gtraces :: [(Int, Trace t p g s e c)],       gorderings :: [Pair],       gnon :: [t],             -- A list of non-originating terms+      gpnon :: [t],      -- A list of penetrator non-originating terms       gunique :: [t],          -- A list of uniquely-originating terms       nvars :: !Int,           -- Number of variables       ntraces :: !Int,         -- Number of traces       norderings :: !Int,      -- Number of orderings       nnon :: !Int,            -- Number of non-originating terms+      npnon :: !Int,     -- Number of penetrator non-originating terms       nunique :: !Int }        -- Number of uniquely-originating terms     deriving Show @@ -688,16 +701,19 @@            gtraces = gtraces,            gorderings = gorderings,            gnon = gnon,+           gpnon = gpnon,            gunique = gunique,            nvars = length (kvars k),            ntraces = length gtraces,            norderings = length gorderings,            nnon = length gnon,+           npnon = length gpnon,            nunique = length gunique }     where       gtraces = map (\i -> (height i, trace i)) (insts k)       gorderings = orderings k       gnon = knon k+      gpnon = kpnon k       gunique = kunique k  -- Test to see if two preskeletons are isomorphic@@ -729,6 +745,7 @@     ntraces g == ntraces g' &&     norderings g == norderings g' &&     nnon g == nnon g' &&+    npnon g == npnon g' &&     nunique g == nunique g' &&     any (tryPerm g g') (permutations g g') @@ -813,10 +830,11 @@               Gist t p g s e c -> (g, e) -> Bool checkOrigs g g' env =     not (null-         [ env'' |+         [ env''' |            env' <- checkOrig env (gnon g) (gnon g'),-           env'' <- checkOrig env' (gunique g) (gunique g'),-           matchRenaming env'' ])+           env'' <- checkOrig env' (gpnon g) (gpnon g'),+           env''' <- checkOrig env'' (gunique g) (gunique g'),+           matchRenaming env''' ])  -- Try all permutations as done above checkOrig :: Algebra t p g s e c => (g, e) -> [t] -> [t] -> [(g, e)]@@ -856,10 +874,11 @@     do       (gen', insts') <- foldMapM (substInst subst) gen (insts k)       let non' = map (substitute subst) (knon k)+      let pnon' = map (substitute subst) (kpnon k)       let unique' = map (substitute subst) (kunique k)       let operation' = substOper subst (operation k)       let k' = newPreskel gen' (protocol k) insts'-               (orderings k) non' unique' operation' (prob k) (pov k)+               (orderings k) non' pnon' unique' operation' (prob k) (pov k)       k' <- wellFormedPreskel k'       case not validate || validateMappingSubst k0 phi subst k' of         True -> return (k0, k', n, phi, compose subst hsubst)@@ -914,6 +933,7 @@               (deleteNth s (insts k))               orderings'               (knon k)+              (kpnon k)               (kunique k)               (operation k)               (updateProb perm (prob k))@@ -969,6 +989,7 @@               (deleteNth s (insts k))               orderings'               (knon k)+              (kpnon k)               (kunique k)               (operation k)               (updateProb perm (prob k))@@ -988,9 +1009,20 @@           | s1 == s = []        -- Dump edges to strand s           | otherwise = [p]     -- Pass thru other edges --- Hulling or Ensuring Unique Origination- -- This is the starting point of the Preskeleton Reduction System+skeletonize :: Algebra t p g s e c => Bool -> PRS t p g s e c ->+               [PRS t p g s e c]+skeletonize prune prs =+    if useHulling then+        hull prune prs+    else+        if twoOrigs then+            []+        else+            enrich prune prs+    where twoOrigs = any (\(_, l) -> length l > 1) (korig (skel prs))++-- Hulling or Ensuring Unique Origination hull :: Algebra t p g s e c => Bool -> PRS t p g s e c ->         [PRS t p g s e c] hull prune prs =@@ -1090,6 +1122,7 @@                   (insts k)                   o                   (knon k)+                  (kpnon k)                   (kunique k)                   (operation k)                   (prob k)@@ -1213,10 +1246,10 @@ matchTraces _ _ _ = []  -- Make sure a substitution does not take a unique out of the set of--- uniques, and the same for nons.+-- uniques, and the same for nons and pnons. origCheck :: Algebra t p g s e c => Preskel t p g s e c -> e -> Bool origCheck k env =-    check (kunique k) && check (knon k)+    check (kunique k) && check (knon k) && check (kpnon k)     where       check orig =           all (pred orig) orig@@ -1463,6 +1496,7 @@                   (insts k)                   o                   (knon k)+                  (kpnon k)                   (kunique k)                   (operation k)                   (prob k)@@ -1502,7 +1536,7 @@               [Preskel t p g s e c] toSkeleton prune k =     do-      prs <- hull prune (k, k, (0, 0), strandids k, emptySubst)+      prs <- skeletonize prune (k, k, (0, 0), strandids k, emptySubst)       (k', _, _) <- homomorphismFilter prs       return k' @@ -1514,23 +1548,19 @@     do       prs <- ksubst False (k, k { operation = Contracted emptySubst cause },                            n, strandids k, emptySubst) subst-      prs' <- hull usePruningWhileSolving prs+      prs' <- skeletonize usePruningWhileSolving prs       homomorphismFilter prs'  -- Regular Augmentation  -- First argument determines if displacement is used.-augment :: Algebra t p g s e c => Bool -> Preskel t p g s e c ->+augment :: Algebra t p g s e c => Preskel t p g s e c ->            Node -> Cause t p g s e c -> Role t p g s e c ->            (g, s) -> Instance t p g s e c -> [Ans t p g s e c]-augment True k0 n cause role subst inst =+augment k0 n cause role subst inst =     do       prs <- augmentAndDisplace k0 n cause role subst inst       homomorphismFilter prs-augment False k0 n cause role subst inst =-    do-      prs <- augmentOnly k0 n cause role subst inst-      homomorphismFilter prs  -- Apply a substitution, and then augment and displace.  Augmentations -- add an instance and one ordered pair.  Displacements add an ordered@@ -1542,18 +1572,7 @@ augmentAndDisplace k0 n cause role subst inst =     do       prs <- substAndAugment k0 n cause role subst inst-      hull usePruningWhileSolving prs ++ augDisplace prs---- Apply a substitution and then augment.  Augmentations add an--- instance and one ordered pair.--augmentOnly :: Algebra t p g s e c =>Preskel t p g s e c ->-           Node -> Cause t p g s e c -> Role t p g s e c ->-           (g, s) -> Instance t p g s e c -> [PRS t p g s e c]-augmentOnly k0 n cause role subst inst =-    do-      prs <- substAndAugment k0 n cause role subst inst-      hull usePruningWhileSolving prs+      augDisplace prs ++ skeletonize usePruningWhileSolving prs  -- Apply the substitution and apply augmentation operator. substAndAugment :: Algebra t p g s e c => Preskel t p g s e c ->@@ -1576,9 +1595,10 @@       let pair = ((length (insts k), height inst - 1), n)       let orderings' = pair : orderings k       let non' = inheritRnon inst ++ (knon k)+      let pnon' = inheritRpnon inst ++ (kpnon k)       let unique' = inheritRunique inst ++ (kunique k)       let k' = newPreskel (gen k) (protocol k) insts'-           orderings' non' unique' (operation k) (prob k) (pov k)+           orderings' non' pnon' unique' (operation k) (prob k) (pov k)       k' <- wellFormedPreskel k'       return (k0, k', n, phi, hsubst) @@ -1587,6 +1607,11 @@ inheritRnon i =     inherit i (rnorig (role i)) +-- Inherit penenetrator non-originating atoms if the traces is long enough+inheritRpnon :: Algebra t p g s e c => Instance t p g s e c -> [t]+inheritRpnon i =+    inherit i (rpnorig (role i))+ -- Inherit uniquely originating atoms if the traces is long enough inheritRunique :: Algebra t p g s e c => Instance t p g s e c -> [t] inheritRunique i =@@ -1615,7 +1640,7 @@       let op = addedToDisplaced (operation k) s s'       prs <- ksubst False (k0, k { operation = op}, n, phi, hsubst) subst       prs <- compress True prs s s'-      hull usePruningWhileSolving prs+      skeletonize usePruningWhileSolving prs  addedToDisplaced :: Algebra t p g s e c => Operation t p g s e c ->                     Int -> Int -> Operation t p g s e c@@ -1630,11 +1655,12 @@ addListener k n cause t =     do       k' <- wellFormedPreskel k'-      prs <- hull usePruningWhileSolving (k, k', n, strandids k, emptySubst)+      prs <- skeletonize usePruningWhileSolving+             (k, k', n, strandids k, emptySubst)       homomorphismFilter prs     where-      k' = newPreskel gen' (protocol k) insts' orderings'-           (knon k) (kunique k) (AddedListener t cause) (prob k) (pov k)+      k' = newPreskel gen' (protocol k) insts' orderings' (knon k)+           (kpnon k) (kunique k) (AddedListener t cause) (prob k) (pov k)       (gen', inst) = mkListener (gen k) t       insts' = insts k ++ [inst]       pair = ((length (insts k), 1), n)@@ -1671,6 +1697,7 @@                Preskel t p g s e c -> [Sid] -> e -> Bool validateEnv k k' mapping env =     all (flip elem (knon k')) (map (instantiate env) (knon k)) &&+    all (flip elem (kpnon k')) (map (instantiate env) (kpnon k)) &&     all (flip elem (kunique k')) (map (instantiate env) (kunique k)) &&     validateEnvOrig k k' mapping env &&     all (flip elem (tc k')) (permuteOrderings mapping (orderings k))@@ -1780,11 +1807,12 @@                   g -> Node -> [Instance t p g s e c] -> [Pair] ->                   [Sid] -> Preskel t p g s e c deleteNodeRest k gen n insts' orderings prob =-    newPreskel gen (protocol k) insts'-               orderings non' unique' (Generalized (Deleted n)) prob (pov k)+    newPreskel gen (protocol k) insts' orderings non' pnon' unique'+                   (Generalized (Deleted n)) prob (pov k)     where       -- Drop nons that aren't mentioned anywhere       non' = filter mentionedIn (knon k)+      pnon' = filter mentionedIn (kpnon k)       mentionedIn t = varSubset [t] terms       terms = iterms insts'       -- Drop uniques that aren't held anywhere@@ -1819,7 +1847,7 @@     addIdentity k'     where       k' = newPreskel (gen k) (protocol k) (insts k)-           orderings (knon k) (kunique k)+           orderings (knon k) (kpnon k) (kunique k)            (Generalized (Weakened p)) (prob k) (pov k)  -- Origination assumption forgetting@@ -1830,7 +1858,7 @@ forgetAssumption :: Algebra t p g s e c => Preskel t p g s e c ->                     [Candidate t p g s e c] forgetAssumption k =-    forgetNonTerm k ++ forgetUniqueTerm k+    forgetNonTerm k ++ forgetPnonTerm k ++ forgetUniqueTerm k  -- Non-originating terms @@ -1849,6 +1877,23 @@     where       ru = [u | i <- insts k, u <- inheritRnon i] +-- Penetrator non-originating terms++forgetPnonTerm :: Algebra t p g s e c => Preskel t p g s e c ->+                 [Candidate t p g s e c]+forgetPnonTerm k =+    map (addIdentity . delPnon) (skelPnons k)+    where+      delPnon t =+          k { kpnon = L.delete t (kpnon k),+              operation = Generalized (Forgot t) }++skelPnons :: Algebra t p g s e c => Preskel t p g s e c -> [t]+skelPnons k =+    filter (flip notElem ru) (kpnon k)+    where+      ru = [u | i <- insts k, u <- inheritRpnon i]+ -- Uniquely-originating terms  forgetUniqueTerm :: Algebra t p g s e c => Preskel t p g s e c ->@@ -1961,11 +2006,12 @@     [addIdentity k0, addIdentity k1]     where       k0 = newPreskel gen' (protocol k) insts' (orderings k)-           non unique0 (Generalized (Separated t)) (prob k) (pov k)+           non pnon unique0 (Generalized (Separated t)) (prob k) (pov k)       k1 = newPreskel gen' (protocol k) insts' (orderings k)-           non unique1 (Generalized (Separated t)) (prob k) (pov k)+           non pnon unique1 (Generalized (Separated t)) (prob k) (pov k)       (gen', insts') = changeStrands locs t gen (strands k)       non = knon k ++ map (instantiate env) (knon k)+      pnon = kpnon k ++ map (instantiate env) (kpnon k)       unique0 = kunique k ++ unique'       unique1 = map (instantiate env) (kunique k) ++ unique'       -- Ensure all role unique assumptions are in.@@ -2027,5 +2073,5 @@       prs <- ksubst False (k, k { operation = Collapsed s s' },                            (0, 0), strandids k, emptySubst) subst       prs <- compress True prs s s'-      prs <- hull usePruningDuringCollapsing prs+      prs <- skeletonize usePruningDuringCollapsing prs       return $ skel prs
src/CPSA/Logic/Main.hs view
@@ -15,11 +15,13 @@ import CPSA.Logic.Logic import qualified CPSA.Basic.Algebra import qualified CPSA.DiffieHellman.Algebra+import qualified CPSA.DiffieHellmanNoReciprocal.Algebra import qualified CPSA.SimpleDiffieHellman.Algebra  -- Algebra names algs :: [String] algs = [CPSA.Basic.Algebra.name, CPSA.DiffieHellman.Algebra.name,+        CPSA.DiffieHellmanNoReciprocal.Algebra.name,         CPSA.SimpleDiffieHellman.Algebra.name]  main :: IO ()@@ -37,6 +39,10 @@                  p ([], [])           | alg == CPSA.DiffieHellman.Algebra.name ->               go (step h alg CPSA.DiffieHellman.Algebra.origin margin)+                 p ([], [])+          | alg == CPSA.DiffieHellmanNoReciprocal.Algebra.name ->+              go (step h alg+                       CPSA.DiffieHellmanNoReciprocal.Algebra.origin margin)                  p ([], [])           | alg == CPSA.SimpleDiffieHellman.Algebra.name ->               go (step h alg CPSA.SimpleDiffieHellman.Algebra.origin margin)
src/CPSA/Parameters/Main.hs view
@@ -18,11 +18,13 @@ import CPSA.Parameters.Flow import qualified CPSA.Basic.Algebra import qualified CPSA.DiffieHellman.Algebra+import qualified CPSA.DiffieHellmanNoReciprocal.Algebra import qualified CPSA.SimpleDiffieHellman.Algebra  -- Algebra names algs :: [String] algs = [CPSA.Basic.Algebra.name, CPSA.DiffieHellman.Algebra.name,+        CPSA.DiffieHellmanNoReciprocal.Algebra.name,         CPSA.SimpleDiffieHellman.Algebra.name]  main :: IO ()@@ -39,6 +41,9 @@               go (step h alg CPSA.Basic.Algebra.origin margin) p           | alg == CPSA.DiffieHellman.Algebra.name ->               go (step h alg CPSA.DiffieHellman.Algebra.origin margin) p+          | alg == CPSA.DiffieHellmanNoReciprocal.Algebra.name ->+              go (step h alg+                       CPSA.DiffieHellmanNoReciprocal.Algebra.origin margin) p           | alg == CPSA.SimpleDiffieHellman.Algebra.name ->               go (step h alg CPSA.SimpleDiffieHellman.Algebra.origin margin) p           | otherwise ->
src/CPSA/SimpleDiffieHellman/Algebra.hs view
@@ -158,13 +158,20 @@ equalTerm (C c) (C c') = c == c' equalTerm (F Invk [F Invk [t]]) t' = equalTerm t t' equalTerm t (F Invk [F Invk [t']]) = equalTerm t t'-equalTerm (F Exp [F Exp [x, y], z]) (F Exp [F Exp [x', y'], z']) =-    equalTerm x x' && equalTerm y y' && equalTerm z z' ||-    equalTerm x x' && equalTerm y z' && equalTerm z y'+equalTerm (F Exp [x, y]) (F Exp [x', y']) =+    case (normalize x y, normalize x' y') of+      ((x, y), (x', y')) -> equalTerm x x' && equalTerm y y' equalTerm (F s u) (F s' u') =     s == s' && u == u' equalTerm _ _ = False +normalize :: Term -> Term -> (Term, Term)+normalize (F Exp [x, y]) (I z) =+    case normalize x y of+      (x, I y) | z < y -> normalize (F Exp [x, I z]) (I y)+      (x, y) -> (F Exp [x, y], I z)+normalize x y = (x, y)+ instance Eq Term where     (==) = equalTerm @@ -175,12 +182,8 @@ compareTerm (C c) (C c') = compare c c' compareTerm (F Invk [F Invk [t]]) t' = compareTerm t t' compareTerm t (F Invk [F Invk [t']]) = compareTerm t t'-compareTerm (F Exp [F Exp [x, y], z]) (F Exp [F Exp [x', y'], z']) =-    case (compare y z, compare y' z') of-      (GT, GT) -> compare [F Exp [x, z], y] [F Exp [x', z'], y']-      (GT, _) -> compare [F Exp [x, z], y] [F Exp [x', y'], z']-      (_, GT) -> compare [F Exp [x, y], z] [F Exp [x', z'], y']-      _ -> compare [F Exp [x, y], z] [F Exp [x', y'], z']+compareTerm (F Exp [x, y]) (F Exp [x', y']) =+    compare (normalize x y) (normalize x' y') compareTerm (F s u) (F s' u') =     case compare s s' of       EQ -> compare u u'@@ -262,7 +265,7 @@ -- --     K ::= I | pubk(I) | invk(I) | invk(pubk(I)) -----     E ::= I | genr(I) | exp(E, I)+--     E ::= I | genr | exp(E, I)  -- termWellFormed checks the structure and sort condition. termWellFormed :: VarEnv -> Term -> Maybe VarEnv@@ -708,6 +711,10 @@     case idSubst subst t of       F Invk [t] -> t           -- Apply axiom       t -> F Invk [t]+idSubst subst (F Exp [x, y]) =+    F Exp [x', y']+    where                       -- Apply other axiom+      (x', y') = normalize (idSubst subst x) (idSubst subst y) idSubst subst (F s u) =     F s (map (idSubst subst) u) @@ -800,6 +807,14 @@     unifyTerms (I y) (F Invk [F Pubk [I x]]) s unifyTerms (F Pubk [C c, I x]) (F Invk [I y]) s =     unifyTerms (I y) (F Invk [F Pubk [C c, I x]]) s+{--+unifyTerms (F Exp [F Exp [F Genr [], x], y]) (F Exp [F Exp [u, v], w]) (g, s) =+    unifyTermLists [F Genr [], x, y] [u, v, w] (g, s) +++    unifyTermLists [F Genr [], x, y] [u, w, v] (g, s)+unifyTerms (F Exp [F Exp [u, v], w]) (F Exp [F Exp [F Genr [], x], y]) (g, s) =+    unifyTermLists [F Genr [], x, y] [u, v, w] (g, s) +++    unifyTermLists [F Genr [], x, y] [u, w, v] (g, s)+-} unifyTerms (F Exp [x, y]) (F Exp [u, v]) (g, s) =     unifyTermLists [x, y] [u, v] (g, s) ++     do@@ -847,8 +862,12 @@       t@(C _) -> t       F Invk [t] ->           case substChase subst t of-            F Invk [t] -> t           -- Apply axiom+            F Invk [t] -> t     -- Apply axiom             t -> F Invk [t]+      F Exp [x, y] ->+          F Exp [x', y']+          where                 -- Apply other axiom+            (x', y') = normalize (substChase subst x) (substChase subst y)       F s u ->           F s (map (substChase subst) u)
tst/DH_hack.tst view
@@ -1,6 +1,6 @@ (herald "DH Hack" (bound 15)) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read") (comment "Strand count bounded at 15") @@ -314,16 +314,15 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton DH_hack-  (vars (d d-0 data) (gcs gcs-0 name) (cek skey) (x y akey))+  (vars (d data) (gcs name) (cek skey) (x y akey))   (defstrand resp 1 (d d) (gcs gcs) (cek cek) (x x) (y y))   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (defstrand commute 2 (d d-0) (gcs gcs-0) (cek cek) (x x) (y y))-  (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))-  (non-orig (invk x) (invk y) (privk gcs) (privk gcs-0))+  (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)))+  (non-orig (invk x) (invk y) (privk gcs))   (uniq-orig d cek x)-  (operation nonce-test (added-strand commute 2) cek (1 0)+  (operation nonce-test (displaced 4 2 commute 2) cek (1 0)     (enc cek (hash (invk x) y)))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))@@ -331,28 +330,24 @@     ((recv (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))-    ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))-    ((recv-       (enc x (enc cek (hash (invk x) y)) (enc d-0 cek) (privk gcs-0)))-      (send-        (enc x (enc cek (hash x (invk y))) (enc d-0 cek)-          (privk gcs-0)))))+    ((send+       (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))))   (label 12)   (parent 11)-  (seen 15)-  (unrealized (1 0) (4 0))-  (comment "2 in cohort - 1 not yet seen"))+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton DH_hack-  (vars (d data) (gcs name) (cek skey) (x y akey))+  (vars (d d-0 data) (gcs gcs-0 name) (cek skey) (x y akey))   (defstrand resp 1 (d d) (gcs gcs) (cek cek) (x x) (y y))   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)))-  (non-orig (invk x) (invk y) (privk gcs))+  (defstrand commute 2 (d d-0) (gcs gcs-0) (cek cek) (x x) (y y))+  (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))+  (non-orig (invk x) (invk y) (privk gcs) (privk gcs-0))   (uniq-orig d cek x)-  (operation nonce-test (displaced 4 2 commute 2) cek (1 0)+  (operation nonce-test (added-strand commute 2) cek (1 0)     (enc cek (hash (invk x) y)))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))@@ -360,12 +355,16 @@     ((recv (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))-    ((send-       (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))))+    ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))+    ((recv+       (enc x (enc cek (hash (invk x) y)) (enc d-0 cek) (privk gcs-0)))+      (send+        (enc x (enc cek (hash x (invk y))) (enc d-0 cek)+          (privk gcs-0)))))   (label 13)   (parent 11)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))+  (unrealized (1 0) (4 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton DH_hack   (vars (d data) (gcs name) (cek skey) (x y akey))@@ -398,12 +397,12 @@   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))+  (deflistener (hash x (invk y)))+  (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)) ((4 1) (1 0)))   (non-orig (invk x) (invk y) (privk gcs))   (uniq-orig d cek x)-  (operation encryption-test (added-strand init1 1)-    (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)) (4 0))+  (operation nonce-test (added-listener (hash x (invk y))) cek (1 0)+    (enc cek (hash x (invk y))) (enc cek (hash (invk x) y)))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((recv cek) (send cek))@@ -411,13 +410,11 @@       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))-    ((recv (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))-      (send-        (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs)))))+    ((recv (hash x (invk y))) (send (hash x (invk y)))))   (label 15)   (parent 12)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))+  (unrealized (4 0))+  (comment "empty cohort"))  (defskeleton DH_hack   (vars (d data) (gcs name) (cek skey) (x y akey))@@ -425,11 +422,11 @@   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (deflistener (hash x (invk y)))+  (deflistener (hash (invk x) y))   (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)) ((4 1) (1 0)))   (non-orig (invk x) (invk y) (privk gcs))   (uniq-orig d cek x)-  (operation nonce-test (added-listener (hash x (invk y))) cek (1 0)+  (operation nonce-test (added-listener (hash (invk x) y)) cek (1 0)     (enc cek (hash x (invk y))) (enc cek (hash (invk x) y)))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))@@ -438,9 +435,9 @@       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))-    ((recv (hash x (invk y))) (send (hash x (invk y)))))+    ((recv (hash (invk x) y)) (send (hash (invk x) y))))   (label 16)-  (parent 13)+  (parent 12)   (unrealized (4 0))   (comment "empty cohort")) @@ -450,12 +447,13 @@   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (deflistener (hash (invk x) y))-  (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)) ((4 1) (1 0)))+  (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))+  (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))   (non-orig (invk x) (invk y) (privk gcs))   (uniq-orig d cek x)-  (operation nonce-test (added-listener (hash (invk x) y)) cek (1 0)-    (enc cek (hash x (invk y))) (enc cek (hash (invk x) y)))+  (operation encryption-test (displaced 5 3 init1 1)+    (enc x (enc cek (hash (invk x) y)) (enc d-0 cek) (privk gcs-0))+    (4 0))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((recv cek) (send cek))@@ -463,11 +461,13 @@       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))-    ((recv (hash (invk x) y)) (send (hash (invk x) y))))+    ((recv (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))+      (send+        (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs)))))   (label 17)   (parent 13)-  (unrealized (4 0))-  (comment "empty cohort"))+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton DH_hack   (vars (d data) (gcs name) (cek skey) (x y akey))@@ -495,7 +495,7 @@         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((recv (hash x (invk y))) (send (hash x (invk y)))))   (label 18)-  (parent 15)+  (parent 17)   (unrealized (5 0))   (comment "empty cohort")) @@ -525,7 +525,7 @@         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((recv (hash (invk x) y)) (send (hash (invk x) y))))   (label 19)-  (parent 15)+  (parent 17)   (unrealized (5 0))   (comment "empty cohort")) @@ -610,16 +610,15 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton DH_hack-  (vars (d d-0 data) (gcs gcs-0 name) (cek skey) (x y akey))+  (vars (d data) (gcs name) (cek skey) (x y akey))   (defstrand resp 1 (d d) (gcs gcs) (cek cek) (x x) (y y))   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (defstrand commute 2 (d d-0) (gcs gcs-0) (cek cek) (x x) (y y))-  (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))-  (non-orig (invk x) (privk gcs) (privk gcs-0))+  (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)))+  (non-orig (invk x) (privk gcs))   (uniq-orig d cek x)-  (operation nonce-test (added-strand commute 2) cek (1 0)+  (operation nonce-test (displaced 4 2 commute 2) cek (1 0)     (enc cek (hash (invk x) y)))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))@@ -627,28 +626,26 @@     ((recv (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))-    ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))-    ((recv-       (enc x (enc cek (hash (invk x) y)) (enc d-0 cek) (privk gcs-0)))-      (send-        (enc x (enc cek (hash x (invk y))) (enc d-0 cek)-          (privk gcs-0)))))+    ((send+       (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))))   (label 23)   (parent 22)-  (seen 26)-  (unrealized (4 0))-  (comment "2 in cohort - 1 not yet seen"))+  (unrealized)+  (shape)+  (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d))))+  (origs (cek (3 0)) (d (3 0)) (x (3 0))))  (defskeleton DH_hack-  (vars (d data) (gcs name) (cek skey) (x y akey))+  (vars (d d-0 data) (gcs gcs-0 name) (cek skey) (x y akey))   (defstrand resp 1 (d d) (gcs gcs) (cek cek) (x x) (y y))   (deflistener cek)   (defstrand commute 2 (d d) (gcs gcs) (cek cek) (x x) (y y))   (defstrand init1 1 (d d) (gcs gcs) (cek cek) (x x) (y y))-  (precedes ((2 1) (0 0)) ((2 1) (1 0)) ((3 0) (2 0)))-  (non-orig (invk x) (privk gcs))+  (defstrand commute 2 (d d-0) (gcs gcs-0) (cek cek) (x x) (y y))+  (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))+  (non-orig (invk x) (privk gcs) (privk gcs-0))   (uniq-orig d cek x)-  (operation nonce-test (displaced 4 2 commute 2) cek (1 0)+  (operation nonce-test (added-strand commute 2) cek (1 0)     (enc cek (hash (invk x) y)))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))@@ -656,14 +653,16 @@     ((recv (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))-    ((send-       (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)))))+    ((send (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs))))+    ((recv+       (enc x (enc cek (hash (invk x) y)) (enc d-0 cek) (privk gcs-0)))+      (send+        (enc x (enc cek (hash x (invk y))) (enc d-0 cek)+          (privk gcs-0)))))   (label 24)   (parent 22)-  (unrealized)-  (shape)-  (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d))))-  (origs (cek (3 0)) (d (3 0)) (x (3 0))))+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton DH_hack   (vars (d data) (gcs name) (cek skey) (x y akey))@@ -700,8 +699,9 @@   (precedes ((2 1) (0 0)) ((3 0) (2 0)) ((3 0) (4 0)) ((4 1) (1 0)))   (non-orig (invk x) (privk gcs))   (uniq-orig d cek x)-  (operation encryption-test (added-strand init1 1)-    (enc x (enc cek (hash (invk x) y)) (enc d cek) (privk gcs)) (4 0))+  (operation encryption-test (displaced 5 3 init1 1)+    (enc x (enc cek (hash (invk x) y)) (enc d-0 cek) (privk gcs-0))+    (4 0))   (traces     ((recv (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs))))     ((recv cek) (send cek))@@ -713,13 +713,11 @@       (send         (enc x (enc cek (hash x (invk y))) (enc d cek) (privk gcs)))))   (label 26)-  (parent 23)-  (seen 24)+  (parent 24)   (unrealized)   (shape)   (maps ((0 1) ((cek cek) (x x) (gcs gcs) (y y) (d d))))-  (origs (cek (3 0)) (d (3 0)) (x (3 0)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (cek (3 0)) (d (3 0)) (x (3 0))))  (comment "Nothing left to do")
tst/blanchet.tst view
@@ -1,7 +1,7 @@ (herald "Blanchet's Simple Example Protocol"   (comment "There is a flaw in this protocol by design")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol blanchet basic
tst/completeness-test.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol completeness-test basic@@ -26,87 +26,85 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton completeness-test-  (vars (n n-0 text) (b a a-0 b-0 name) (s s-0 skey))-  (defstrand init 3 (n n) (a a) (b b) (s s-0))+  (vars (n text) (b a name) (s skey))+  (defstrand init 3 (n n) (a a) (b b) (s s))   (defstrand probe 1 (s s))-  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))-  (precedes ((2 2) (1 0)))+  (precedes ((0 2) (1 0)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (added-strand init 3) (enc "ok" s) (1 0))+  (operation encryption-test (displaced 2 0 init 3) (enc "ok" s-0)+    (1 0))   (traces     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s-0))) ((recv (enc "ok" s)))-    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))-      (send (enc "ok" s))))+      (send (enc "ok" s))) ((recv (enc "ok" s))))   (label 1)   (parent 0)   (unrealized (0 1))+  (origs (n (0 0)))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton completeness-test-  (vars (n text) (b a name) (s skey))-  (defstrand init 3 (n n) (a a) (b b) (s s))+  (vars (n n-0 text) (b a a-0 b-0 name) (s s-0 skey))+  (defstrand init 3 (n n) (a a) (b b) (s s-0))   (defstrand probe 1 (s s))-  (precedes ((0 2) (1 0)))+  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))+  (precedes ((2 2) (1 0)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (displaced 2 0 init 3) (enc "ok" s-0)-    (1 0))+  (operation encryption-test (added-strand init 3) (enc "ok" s) (1 0))   (traces     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s))) ((recv (enc "ok" s))))+      (send (enc "ok" s-0))) ((recv (enc "ok" s)))+    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))+      (send (enc "ok" s))))   (label 2)   (parent 0)   (unrealized (0 1))-  (origs (n (0 0)))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton completeness-test-  (vars (n n-0 text) (b a a-0 b-0 name) (s s-0 skey))-  (defstrand init 3 (n n) (a a) (b b) (s s-0))+  (vars (n text) (b a name) (s skey))+  (defstrand init 3 (n n) (a a) (b b) (s s))   (defstrand probe 1 (s s))-  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))   (defstrand resp 2 (n n) (a a) (b b))-  (precedes ((0 0) (3 0)) ((2 2) (1 0)) ((3 1) (0 1)))+  (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (0 1)))   (non-orig s (privk b))   (uniq-orig n)   (operation nonce-test (added-strand resp 2) n (0 1)     (enc a n (pubk b)))   (traces     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s-0))) ((recv (enc "ok" s)))-    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))-      (send (enc "ok" s)))+      (send (enc "ok" s))) ((recv (enc "ok" s)))     ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))   (label 3)   (parent 1)-  (seen 4)   (unrealized)   (shape)-  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0))))-  (origs (n (0 0)))-  (comment "1 in cohort - 0 not yet seen"))+  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s))))+  (origs (n (0 0))))  (defskeleton completeness-test-  (vars (n text) (b a name) (s skey))-  (defstrand init 3 (n n) (a a) (b b) (s s))+  (vars (n n-0 text) (b a a-0 b-0 name) (s s-0 skey))+  (defstrand init 3 (n n) (a a) (b b) (s s-0))   (defstrand probe 1 (s s))+  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))   (defstrand resp 2 (n n) (a a) (b b))-  (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (0 1)))+  (precedes ((0 0) (3 0)) ((2 2) (1 0)) ((3 1) (0 1)))   (non-orig s (privk b))   (uniq-orig n)   (operation nonce-test (added-strand resp 2) n (0 1)     (enc a n (pubk b)))   (traces     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s))) ((recv (enc "ok" s)))+      (send (enc "ok" s-0))) ((recv (enc "ok" s)))+    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))+      (send (enc "ok" s)))     ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))   (label 4)   (parent 2)   (unrealized)   (shape)-  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s))))+  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0))))   (origs (n (0 0))))  (comment "Nothing left to do")@@ -155,49 +153,47 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton completeness-test-  (vars (n n-0 text) (b a a-0 b-0 name) (s s-0 skey))+  (vars (n text) (b a name) (s skey))   (defstrand probe 1 (s s))-  (defstrand init 3 (n n) (a a) (b b) (s s-0))+  (defstrand init 3 (n n) (a a) (b b) (s s))   (defstrand resp 2 (n n) (a a) (b b))-  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))-  (precedes ((1 0) (2 0)) ((2 1) (1 1)) ((3 2) (0 0)))+  (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (added-strand init 3) (enc "ok" s) (0 0))+  (operation encryption-test (displaced 3 1 init 3) (enc "ok" s-0)+    (0 0))   (traces ((recv (enc "ok" s)))     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s-0)))-    ((recv (enc a n (pubk b))) (send (enc n (pubk a))))-    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))-      (send (enc "ok" s))))+      (send (enc "ok" s)))+    ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))   (label 7)   (parent 6)-  (seen 8)   (unrealized)   (shape)-  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0))))-  (origs (n (1 0)))-  (comment "1 in cohort - 0 not yet seen"))+  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s))))+  (origs (n (1 0))))  (defskeleton completeness-test-  (vars (n text) (b a name) (s skey))+  (vars (n n-0 text) (b a a-0 b-0 name) (s s-0 skey))   (defstrand probe 1 (s s))-  (defstrand init 3 (n n) (a a) (b b) (s s))+  (defstrand init 3 (n n) (a a) (b b) (s s-0))   (defstrand resp 2 (n n) (a a) (b b))-  (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1)))+  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))+  (precedes ((1 0) (2 0)) ((2 1) (1 1)) ((3 2) (0 0)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (displaced 3 1 init 3) (enc "ok" s-0)-    (0 0))+  (operation encryption-test (added-strand init 3) (enc "ok" s) (0 0))   (traces ((recv (enc "ok" s)))     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s)))-    ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))+      (send (enc "ok" s-0)))+    ((recv (enc a n (pubk b))) (send (enc n (pubk a))))+    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))+      (send (enc "ok" s))))   (label 8)   (parent 6)   (unrealized)   (shape)-  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s))))+  (maps ((0 1) ((b b) (n n) (s s) (a a) (s-0 s-0))))   (origs (n (1 0))))  (comment "Nothing left to do")@@ -226,6 +222,23 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton completeness-test+  (vars (n text) (a b name) (s skey))+  (defstrand probe 1 (s s))+  (defstrand init 3 (n n) (a a) (b b) (s s))+  (precedes ((1 2) (0 0)))+  (non-orig s (privk b))+  (uniq-orig n)+  (operation encryption-test (displaced 0 2 init 3) (enc "ok" s) (1 0))+  (traces ((recv (enc "ok" s)))+    ((send (enc a n (pubk b))) (recv (enc n (pubk a)))+      (send (enc "ok" s))))+  (label 10)+  (parent 9)+  (unrealized (1 1))+  (origs (n (1 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton completeness-test   (vars (n n-0 text) (b a a-0 b-0 name) (s skey))   (defstrand init 2 (n n) (a a) (b b))   (defstrand probe 1 (s s))@@ -238,7 +251,7 @@     ((recv (enc "ok" s)))     ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))       (send (enc "ok" s))))-  (label 10)+  (label 11)   (parent 9)   (unrealized (0 1))   (comment "1 in cohort - 1 not yet seen"))@@ -247,18 +260,22 @@   (vars (n text) (a b name) (s skey))   (defstrand probe 1 (s s))   (defstrand init 3 (n n) (a a) (b b) (s s))-  (precedes ((1 2) (0 0)))+  (defstrand resp 2 (n n) (a a) (b b))+  (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (displaced 0 2 init 3) (enc "ok" s) (1 0))+  (operation nonce-test (added-strand resp 2) n (1 1)+    (enc a n (pubk b)))   (traces ((recv (enc "ok" s)))     ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s))))-  (label 11)-  (parent 9)-  (unrealized (1 1))-  (origs (n (1 0)))-  (comment "1 in cohort - 1 not yet seen"))+      (send (enc "ok" s)))+    ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))+  (label 12)+  (parent 10)+  (unrealized)+  (shape)+  (maps ((1 0) ((b b) (n n) (s s) (a a))))+  (origs (n (1 0))))  (defskeleton completeness-test   (vars (n n-0 text) (b a a-0 b-0 name) (s skey))@@ -276,35 +293,12 @@     ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))       (send (enc "ok" s)))     ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))-  (label 12)-  (parent 10)-  (seen 13)-  (unrealized)-  (shape)-  (maps ((0 1) ((b b) (n n) (s s) (a a))))-  (origs (n (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton completeness-test-  (vars (n text) (a b name) (s skey))-  (defstrand probe 1 (s s))-  (defstrand init 3 (n n) (a a) (b b) (s s))-  (defstrand resp 2 (n n) (a a) (b b))-  (precedes ((1 0) (2 0)) ((1 2) (0 0)) ((2 1) (1 1)))-  (non-orig s (privk b))-  (uniq-orig n)-  (operation nonce-test (added-strand resp 2) n (1 1)-    (enc a n (pubk b)))-  (traces ((recv (enc "ok" s)))-    ((send (enc a n (pubk b))) (recv (enc n (pubk a)))-      (send (enc "ok" s)))-    ((recv (enc a n (pubk b))) (send (enc n (pubk a)))))   (label 13)   (parent 11)   (unrealized)   (shape)-  (maps ((1 0) ((b b) (n n) (s s) (a a))))-  (origs (n (1 0))))+  (maps ((0 1) ((b b) (n n) (s s) (a a))))+  (origs (n (0 0))))  (comment "Nothing left to do") @@ -350,47 +344,45 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton completeness-test-  (vars (n n-0 text) (b a a-0 b-0 name) (s skey))+  (vars (n text) (a b name) (s skey))   (defstrand probe 1 (s s))-  (defstrand init 2 (n n) (a a) (b b))   (defstrand resp 2 (n n) (a a) (b b))-  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))-  (precedes ((1 0) (2 0)) ((2 1) (1 1)) ((3 2) (0 0)))+  (defstrand init 3 (n n) (a a) (b b) (s s))+  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 2) (0 0)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (added-strand init 3) (enc "ok" s) (0 0))+  (operation encryption-test (displaced 1 3 init 3) (enc "ok" s) (0 0))   (traces ((recv (enc "ok" s)))-    ((send (enc a n (pubk b))) (recv (enc n (pubk a))))     ((recv (enc a n (pubk b))) (send (enc n (pubk a))))-    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))+    ((send (enc a n (pubk b))) (recv (enc n (pubk a)))       (send (enc "ok" s))))   (label 16)   (parent 15)-  (seen 17)   (unrealized)   (shape)-  (maps ((0 1) ((b b) (n n) (s s) (a a))))-  (origs (n (1 0)))-  (comment "1 in cohort - 0 not yet seen"))+  (maps ((0 2) ((b b) (n n) (s s) (a a))))+  (origs (n (2 0))))  (defskeleton completeness-test-  (vars (n text) (a b name) (s skey))+  (vars (n n-0 text) (b a a-0 b-0 name) (s skey))   (defstrand probe 1 (s s))+  (defstrand init 2 (n n) (a a) (b b))   (defstrand resp 2 (n n) (a a) (b b))-  (defstrand init 3 (n n) (a a) (b b) (s s))-  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 2) (0 0)))+  (defstrand init 3 (n n-0) (a a-0) (b b-0) (s s))+  (precedes ((1 0) (2 0)) ((2 1) (1 1)) ((3 2) (0 0)))   (non-orig s (privk b))   (uniq-orig n)-  (operation encryption-test (displaced 1 3 init 3) (enc "ok" s) (0 0))+  (operation encryption-test (added-strand init 3) (enc "ok" s) (0 0))   (traces ((recv (enc "ok" s)))+    ((send (enc a n (pubk b))) (recv (enc n (pubk a))))     ((recv (enc a n (pubk b))) (send (enc n (pubk a))))-    ((send (enc a n (pubk b))) (recv (enc n (pubk a)))+    ((send (enc a-0 n-0 (pubk b-0))) (recv (enc n-0 (pubk a-0)))       (send (enc "ok" s))))   (label 17)   (parent 15)   (unrealized)   (shape)-  (maps ((0 2) ((b b) (n n) (s s) (a a))))-  (origs (n (2 0))))+  (maps ((0 1) ((b b) (n n) (s s) (a a))))+  (origs (n (1 0))))  (comment "Nothing left to do")
tst/crushing.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol crushing basic@@ -55,6 +55,26 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton crushing+  (vars (n n1 n3 text) (k akey))+  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n3) (k k))+  (defstrand adder 2 (n n) (new n1) (k k))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (invk k))+  (uniq-orig n n1 n3)+  (operation encryption-test (displaced 2 1 adder 2) (enc n n2 (invk k))+    (0 2))+  (traces+    ((send (enc n k)) (recv (enc n n1 (invk k)))+      (recv (enc n n1 (invk k))) (recv (enc n n3 (invk k)))+      (send (enc n n1 n1 n3 (invk k)))+      (recv (enc n n1 n1 n3 n (invk k))))+    ((recv (enc n k)) (send (enc n n1 (invk k)))))+  (label 2)+  (parent 1)+  (unrealized (0 3) (0 5))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton crushing   (vars (n n1 n2 n3 text) (k akey))   (defstrand init 6 (n n) (n1 n1) (n2 n2) (n3 n3) (k k))   (defstrand adder 2 (n n) (new n1) (k k))@@ -71,52 +91,49 @@       (recv (enc n n1 n2 n3 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))     ((recv (enc n k)) (send (enc n n2 (invk k)))))-  (label 2)+  (label 3)   (parent 1)   (unrealized (0 3) (0 5))   (comment "3 in cohort - 3 not yet seen"))  (defskeleton crushing-  (vars (n n1 n3 text) (k akey))-  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n3) (k k))+  (vars (n n1 text) (k akey))+  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n1) (k k))   (defstrand adder 2 (n n) (new n1) (k k))   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (invk k))-  (uniq-orig n n1 n3)-  (operation encryption-test (displaced 2 1 adder 2) (enc n n2 (invk k))-    (0 2))+  (uniq-orig n n1)+  (operation encryption-test (displaced 2 1 adder 2) (enc n n3 (invk k))+    (0 3))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))-      (recv (enc n n1 (invk k))) (recv (enc n n3 (invk k)))-      (send (enc n n1 n1 n3 (invk k)))-      (recv (enc n n1 n1 n3 n (invk k))))+      (recv (enc n n1 (invk k))) (recv (enc n n1 (invk k)))+      (send (enc n n1 n1 n1 (invk k)))+      (recv (enc n n1 n1 n1 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k)))))-  (label 3)-  (parent 1)-  (unrealized (0 3) (0 5))-  (comment "2 in cohort - 2 not yet seen"))+  (label 4)+  (parent 2)+  (unrealized (0 5))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton crushing-  (vars (n n1 n2 n3 text) (k akey))-  (defstrand init 6 (n n) (n1 n1) (n2 n2) (n3 n3) (k k))+  (vars (n n1 n3 text) (k akey))+  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n3) (k k))   (defstrand adder 2 (n n) (new n1) (k k))-  (defstrand adder 2 (n n) (new n2) (k k))   (defstrand adder 2 (n n) (new n3) (k k))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 2)) ((3 1) (0 3)))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (invk k))-  (uniq-orig n n1 n2 n3)+  (uniq-orig n n1 n3)   (operation encryption-test (added-strand adder 2) (enc n n3 (invk k))     (0 3))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))-      (recv (enc n n2 (invk k))) (recv (enc n n3 (invk k)))-      (send (enc n n1 n2 n3 (invk k)))-      (recv (enc n n1 n2 n3 n (invk k))))+      (recv (enc n n1 (invk k))) (recv (enc n n3 (invk k)))+      (send (enc n n1 n1 n3 (invk k)))+      (recv (enc n n1 n1 n3 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))-    ((recv (enc n k)) (send (enc n n2 (invk k))))     ((recv (enc n k)) (send (enc n n3 (invk k)))))-  (label 4)+  (label 5)   (parent 2)   (unrealized (0 5))   (comment "1 in cohort - 1 not yet seen"))@@ -138,8 +155,8 @@       (recv (enc n n1 n2 n1 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))     ((recv (enc n k)) (send (enc n n2 (invk k)))))-  (label 5)-  (parent 2)+  (label 6)+  (parent 3)   (unrealized (0 5))   (comment "1 in cohort - 1 not yet seen")) @@ -160,29 +177,32 @@       (recv (enc n n1 n2 n2 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))     ((recv (enc n k)) (send (enc n n2 (invk k)))))-  (label 6)-  (parent 2)+  (label 7)+  (parent 3)   (unrealized (0 5))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton crushing-  (vars (n n1 n3 text) (k akey))-  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n3) (k k))+  (vars (n n1 n2 n3 text) (k akey))+  (defstrand init 6 (n n) (n1 n1) (n2 n2) (n3 n3) (k k))   (defstrand adder 2 (n n) (new n1) (k k))+  (defstrand adder 2 (n n) (new n2) (k k))   (defstrand adder 2 (n n) (new n3) (k k))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 2)) ((3 1) (0 3)))   (non-orig (invk k))-  (uniq-orig n n1 n3)+  (uniq-orig n n1 n2 n3)   (operation encryption-test (added-strand adder 2) (enc n n3 (invk k))     (0 3))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))-      (recv (enc n n1 (invk k))) (recv (enc n n3 (invk k)))-      (send (enc n n1 n1 n3 (invk k)))-      (recv (enc n n1 n1 n3 n (invk k))))+      (recv (enc n n2 (invk k))) (recv (enc n n3 (invk k)))+      (send (enc n n1 n2 n3 (invk k)))+      (recv (enc n n1 n2 n3 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))+    ((recv (enc n k)) (send (enc n n2 (invk k))))     ((recv (enc n k)) (send (enc n n3 (invk k)))))-  (label 7)+  (label 8)   (parent 3)   (unrealized (0 5))   (comment "1 in cohort - 1 not yet seen"))@@ -191,51 +211,50 @@   (vars (n n1 text) (k akey))   (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n1) (k k))   (defstrand adder 2 (n n) (new n1) (k k))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (defstrand twister 2 (n n) (n1 n1) (n2 n1) (n3 n1) (k k))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (2 0)) ((2 1) (0 5)))   (non-orig (invk k))   (uniq-orig n n1)-  (operation encryption-test (displaced 2 1 adder 2) (enc n n3 (invk k))-    (0 3))+  (operation encryption-test (added-strand twister 2)+    (enc n n1 n1 n1 n (invk k)) (0 5))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))       (recv (enc n n1 (invk k))) (recv (enc n n1 (invk k)))       (send (enc n n1 n1 n1 (invk k)))       (recv (enc n n1 n1 n1 n (invk k))))-    ((recv (enc n k)) (send (enc n n1 (invk k)))))-  (label 8)-  (parent 3)-  (unrealized (0 5))+    ((recv (enc n k)) (send (enc n n1 (invk k))))+    ((recv (enc n n1 n1 n1 (invk k)))+      (send (enc n n1 n1 n1 n (invk k)))))+  (label 9)+  (parent 4)+  (unrealized (2 0))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton crushing-  (vars (n n1 n2 n3 text) (k akey))-  (defstrand init 6 (n n) (n1 n1) (n2 n2) (n3 n3) (k k))+  (vars (n n1 n3 text) (k akey))+  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n3) (k k))   (defstrand adder 2 (n n) (new n1) (k k))-  (defstrand adder 2 (n n) (new n2) (k k))   (defstrand adder 2 (n n) (new n3) (k k))-  (defstrand twister 2 (n n) (n1 n3) (n2 n1) (n3 n2) (k k))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (0 3))-    ((3 1) (4 0)) ((4 1) (0 5)))+  (defstrand twister 2 (n n) (n1 n3) (n2 n1) (n3 n1) (k k))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((1 1) (3 0))+    ((2 1) (0 3)) ((2 1) (3 0)) ((3 1) (0 5)))   (non-orig (invk k))-  (uniq-orig n n1 n2 n3)+  (uniq-orig n n1 n3)   (operation encryption-test (added-strand twister 2)-    (enc n n1 n2 n3 n (invk k)) (0 5))+    (enc n n1 n1 n3 n (invk k)) (0 5))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))-      (recv (enc n n2 (invk k))) (recv (enc n n3 (invk k)))-      (send (enc n n1 n2 n3 (invk k)))-      (recv (enc n n1 n2 n3 n (invk k))))+      (recv (enc n n1 (invk k))) (recv (enc n n3 (invk k)))+      (send (enc n n1 n1 n3 (invk k)))+      (recv (enc n n1 n1 n3 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))-    ((recv (enc n k)) (send (enc n n2 (invk k))))     ((recv (enc n k)) (send (enc n n3 (invk k))))-    ((recv (enc n n3 n1 n2 (invk k)))-      (send (enc n n1 n2 n3 n (invk k)))))-  (label 9)-  (parent 4)-  (seen 14)-  (unrealized (4 0))-  (comment "2 in cohort - 1 not yet seen"))+    ((recv (enc n n3 n1 n1 (invk k)))+      (send (enc n n1 n1 n3 n (invk k)))))+  (label 10)+  (parent 5)+  (unrealized (3 0))+  (comment "empty cohort"))  (defskeleton crushing   (vars (n n1 n2 text) (k akey))@@ -258,11 +277,10 @@     ((recv (enc n k)) (send (enc n n2 (invk k))))     ((recv (enc n n1 n1 n2 (invk k)))       (send (enc n n1 n2 n1 n (invk k)))))-  (label 10)-  (parent 5)-  (seen 14)+  (label 11)+  (parent 6)   (unrealized (3 0))-  (comment "2 in cohort - 0 not yet seen"))+  (comment "empty cohort"))  (defskeleton crushing   (vars (n n1 n2 text) (k akey))@@ -285,49 +303,50 @@     ((recv (enc n k)) (send (enc n n2 (invk k))))     ((recv (enc n n2 n1 n2 (invk k)))       (send (enc n n1 n2 n2 n (invk k)))))-  (label 11)-  (parent 6)-  (seen 14)+  (label 12)+  (parent 7)   (unrealized (3 0))-  (comment "2 in cohort - 0 not yet seen"))+  (comment "empty cohort"))  (defskeleton crushing-  (vars (n n1 n3 text) (k akey))-  (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n3) (k k))+  (vars (n n1 n2 n3 text) (k akey))+  (defstrand init 6 (n n) (n1 n1) (n2 n2) (n3 n3) (k k))   (defstrand adder 2 (n n) (new n1) (k k))+  (defstrand adder 2 (n n) (new n2) (k k))   (defstrand adder 2 (n n) (new n3) (k k))-  (defstrand twister 2 (n n) (n1 n3) (n2 n1) (n3 n1) (k k))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((1 1) (3 0))-    ((2 1) (0 3)) ((2 1) (3 0)) ((3 1) (0 5)))+  (defstrand twister 2 (n n) (n1 n3) (n2 n1) (n3 n2) (k k))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (0 3))+    ((3 1) (4 0)) ((4 1) (0 5)))   (non-orig (invk k))-  (uniq-orig n n1 n3)+  (uniq-orig n n1 n2 n3)   (operation encryption-test (added-strand twister 2)-    (enc n n1 n1 n3 n (invk k)) (0 5))+    (enc n n1 n2 n3 n (invk k)) (0 5))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))-      (recv (enc n n1 (invk k))) (recv (enc n n3 (invk k)))-      (send (enc n n1 n1 n3 (invk k)))-      (recv (enc n n1 n1 n3 n (invk k))))+      (recv (enc n n2 (invk k))) (recv (enc n n3 (invk k)))+      (send (enc n n1 n2 n3 (invk k)))+      (recv (enc n n1 n2 n3 n (invk k))))     ((recv (enc n k)) (send (enc n n1 (invk k))))+    ((recv (enc n k)) (send (enc n n2 (invk k))))     ((recv (enc n k)) (send (enc n n3 (invk k))))-    ((recv (enc n n3 n1 n1 (invk k)))-      (send (enc n n1 n1 n3 n (invk k)))))-  (label 12)-  (parent 7)-  (seen 14)-  (unrealized (3 0))-  (comment "2 in cohort - 0 not yet seen"))+    ((recv (enc n n3 n1 n2 (invk k)))+      (send (enc n n1 n2 n3 n (invk k)))))+  (label 13)+  (parent 8)+  (unrealized (4 0))+  (comment "empty cohort"))  (defskeleton crushing   (vars (n n1 text) (k akey))   (defstrand init 6 (n n) (n1 n1) (n2 n1) (n3 n1) (k k))   (defstrand adder 2 (n n) (new n1) (k k))   (defstrand twister 2 (n n) (n1 n1) (n2 n1) (n3 n1) (k k))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)) ((1 1) (2 0)) ((2 1) (0 5)))+  (precedes ((0 0) (1 0)) ((0 4) (2 0)) ((1 1) (0 1)) ((2 1) (0 5)))   (non-orig (invk k))   (uniq-orig n n1)-  (operation encryption-test (added-strand twister 2)-    (enc n n1 n1 n1 n (invk k)) (0 5))+  (operation encryption-test (displaced 3 0 init 5)+    (enc n n1 n1 n1 (invk k)) (2 0))   (traces     ((send (enc n k)) (recv (enc n n1 (invk k)))       (recv (enc n n1 (invk k))) (recv (enc n n1 (invk k)))@@ -336,35 +355,11 @@     ((recv (enc n k)) (send (enc n n1 (invk k))))     ((recv (enc n n1 n1 n1 (invk k)))       (send (enc n n1 n1 n1 n (invk k)))))-  (label 13)-  (parent 8)-  (seen 14)-  (unrealized (2 0))-  (comment "2 in cohort - 0 not yet seen"))--(defskeleton crushing-  (vars (n n2 text) (k akey))-  (defstrand init 6 (n n) (n1 n2) (n2 n2) (n3 n2) (k k))-  (defstrand adder 2 (n n) (new n2) (k k))-  (defstrand twister 2 (n n) (n1 n2) (n2 n2) (n3 n2) (k k))-  (precedes ((0 0) (1 0)) ((0 4) (2 0)) ((1 1) (0 1)) ((2 1) (0 5)))-  (non-orig (invk k))-  (uniq-orig n n2)-  (operation encryption-test (added-strand init 5)-    (enc n n2 n2 n2 (invk k)) (4 0))-  (traces-    ((send (enc n k)) (recv (enc n n2 (invk k)))-      (recv (enc n n2 (invk k))) (recv (enc n n2 (invk k)))-      (send (enc n n2 n2 n2 (invk k)))-      (recv (enc n n2 n2 n2 n (invk k))))-    ((recv (enc n k)) (send (enc n n2 (invk k))))-    ((recv (enc n n2 n2 n2 (invk k)))-      (send (enc n n2 n2 n2 n (invk k)))))   (label 14)   (parent 9)   (unrealized)   (shape)-  (maps ((0) ((k k) (n n) (n1 n2) (n2 n2) (n3 n2))))-  (origs (n (0 0)) (n2 (1 1))))+  (maps ((0) ((k k) (n n) (n1 n1) (n2 n1) (n3 n1))))+  (origs (n (0 0)) (n1 (1 1))))  (comment "Nothing left to do")
tst/dass_simple.tst view
@@ -1,6 +1,6 @@ (herald "Distributed Authentication Security Service Protocol Variants") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol dass-simple basic@@ -53,9 +53,8 @@       (send (enc "resp" tb k))))   (label 1)   (parent 0)-  (seen 3)   (unrealized (1 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dass-simple   (vars (ta tb text) (a b name) (k skey) (kp akey))@@ -82,7 +81,7 @@   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (invk kp) (privk a) (privk b))   (uniq-orig k kp)-  (operation encryption-test (added-strand init 1) (enc "init" ta k)+  (operation encryption-test (displaced 2 0 init 1) (enc "init" ta-0 k)     (1 0))   (traces     ((send@@ -195,9 +194,8 @@       (send (enc "resp" tb k))))   (label 7)   (parent 6)-  (seen 9)   (unrealized (1 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dass+   (vars (ta tb text) (a b name) (k skey) (kp akey))@@ -224,7 +222,7 @@   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (invk kp) (privk a) (privk b) (privk a-0))   (uniq-orig k kp)-  (operation encryption-test (added-strand init 1) (enc "init" ta k)+  (operation encryption-test (displaced 2 0 init 1) (enc "init" ta-0 k)     (1 0))   (traces     ((send@@ -263,6 +261,27 @@   (comment "empty cohort"))  (defskeleton dass++  (vars (ta tb text) (a b b-0 name) (k skey) (kp akey))+  (defstrand init 2 (ta ta) (tb tb) (a a) (b b) (k k) (kp kp))+  (defstrand resp 2 (ta ta) (tb tb) (a a) (b b-0) (k k) (kp kp))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (invk kp) (privk a) (privk b))+  (uniq-orig k kp)+  (operation encryption-test (displaced 2 0 init 1)+    (enc a-0 kp-0 (privk a-0)) (1 0))+  (traces+    ((send+       (cat (enc "init" ta k) (enc a kp (privk a))+         (enc (enc k (pubk b)) (invk kp)))) (recv (enc "resp" tb k)))+    ((recv+       (cat (enc "init" ta k) (enc a kp (privk a))+         (enc (enc k (pubk b-0)) (invk kp)))) (send (enc "resp" tb k))))+  (label 11)+  (parent 9)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dass+   (vars (ta tb ta-0 text) (a b a-0 b-0 b-1 name) (k k-0 skey)     (kp kp-0 akey))   (defstrand init 2 (ta ta) (tb tb) (a a) (b b) (k k) (kp kp))@@ -284,32 +303,33 @@     ((send        (cat (enc "init" ta-0 k-0) (enc a-0 kp-0 (privk a-0))          (enc (enc k-0 (pubk b-1)) (invk kp-0))))))-  (label 11)+  (label 12)   (parent 9)   (unrealized (1 0))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton dass+-  (vars (ta tb text) (a b b-0 name) (k skey) (kp akey))+  (vars (ta tb text) (a b name) (k skey) (kp akey))   (defstrand init 2 (ta ta) (tb tb) (a a) (b b) (k k) (kp kp))-  (defstrand resp 2 (ta ta) (tb tb) (a a) (b b-0) (k k) (kp kp))+  (defstrand resp 2 (ta ta) (tb tb) (a a) (b b) (k k) (kp kp))   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (invk kp) (privk a) (privk b))   (uniq-orig k kp)   (operation encryption-test (displaced 2 0 init 1)-    (enc a-0 kp-0 (privk a-0)) (1 0))+    (enc (enc k (pubk b-0)) (invk kp)) (1 0))   (traces     ((send        (cat (enc "init" ta k) (enc a kp (privk a))          (enc (enc k (pubk b)) (invk kp)))) (recv (enc "resp" tb k)))     ((recv        (cat (enc "init" ta k) (enc a kp (privk a))-         (enc (enc k (pubk b-0)) (invk kp)))) (send (enc "resp" tb k))))-  (label 12)-  (parent 9)-  (seen 14)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))+         (enc (enc k (pubk b)) (invk kp)))) (send (enc "resp" tb k))))+  (label 13)+  (parent 11)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb))))+  (origs (k (0 0)) (kp (0 0))))  (defskeleton dass+   (vars (ta tb ta-0 text) (a b a-0 b-0 name) (k k-0 skey)@@ -331,31 +351,6 @@     ((send        (cat (enc "init" ta-0 k-0) (enc a-0 kp-0 (privk a-0))          (enc (enc k-0 (pubk b-0)) (invk kp-0))))))-  (label 13)-  (parent 11)-  (seen 14)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (k k) (kp kp) (ta ta) (tb tb))))-  (origs (k (0 0)) (kp (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dass+-  (vars (ta tb text) (a b name) (k skey) (kp akey))-  (defstrand init 2 (ta ta) (tb tb) (a a) (b b) (k k) (kp kp))-  (defstrand resp 2 (ta ta) (tb tb) (a a) (b b) (k k) (kp kp))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (invk kp) (privk a) (privk b))-  (uniq-orig k kp)-  (operation encryption-test (added-strand init 1)-    (enc (enc k (pubk b)) (invk kp)) (1 0))-  (traces-    ((send-       (cat (enc "init" ta k) (enc a kp (privk a))-         (enc (enc k (pubk b)) (invk kp)))) (recv (enc "resp" tb k)))-    ((recv-       (cat (enc "init" ta k) (enc a kp (privk a))-         (enc (enc k (pubk b)) (invk kp)))) (send (enc "resp" tb k))))   (label 14)   (parent 12)   (unrealized)
tst/denning-sacco.tst view
@@ -1,6 +1,6 @@ (herald "Denning-Sacco Protocol") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol denning-sacco basic@@ -149,44 +149,6 @@   (comment "4 in cohort - 4 not yet seen"))  (defskeleton denning-sacco-  (vars (ta text) (a b ks b-0 b-1 name) (k skey))-  (defstrand resp 1 (ta ta) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ta ta) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (a b) (b b-0) (ks ks))-  (defstrand keyserver 2 (a a) (b b-1) (ks ks))-  (precedes ((1 2) (0 0)) ((2 1) (1 1)) ((3 1) (1 1)))-  (non-orig (privk a) (privk b) (privk ks))-  (uniq-orig k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a (pubk a) (privk ks)) (1 1))-  (traces-    ((recv-       (enc (enc a b k ta (privk a)) (enc b (pubk b) (privk ks))-         (enc a (pubk a) (privk ks)) (pubk b))))-    ((send (cat a b))-      (recv-        (cat (enc b (pubk b) (privk ks)) (enc a (pubk a) (privk ks))))-      (send-        (enc (enc a b k ta (privk a)) (enc b (pubk b) (privk ks))-          (enc a (pubk a) (privk ks)) (pubk b))))-    ((recv (cat b b-0))-      (send-        (cat (enc b-0 (pubk b-0) (privk ks))-          (enc b (pubk b) (privk ks)))))-    ((recv (cat a b-1))-      (send-        (cat (enc b-1 (pubk b-1) (privk ks))-          (enc a (pubk a) (privk ks))))))-  (label 5)-  (parent 3)-  (seen 6)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta))))-  (origs (k (1 2)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton denning-sacco   (vars (ta text) (b ks b-0 name) (k skey))   (defstrand resp 1 (ta ta) (a b) (b b) (ks ks) (k k))   (defstrand init 3 (ta ta) (a b) (b b) (ks ks) (k k))@@ -210,7 +172,7 @@       (send         (cat (enc b-0 (pubk b-0) (privk ks))           (enc b (pubk b) (privk ks))))))-  (label 6)+  (label 5)   (parent 3)   (unrealized)   (shape)@@ -218,11 +180,11 @@   (origs (k (1 2))))  (defskeleton denning-sacco-  (vars (ta text) (a b ks b-0 a-0 name) (k skey))+  (vars (ta text) (a b ks b-0 b-1 name) (k skey))   (defstrand resp 1 (ta ta) (a a) (b b) (ks ks) (k k))   (defstrand init 3 (ta ta) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (a b) (b b-0) (ks ks))-  (defstrand keyserver 2 (a a-0) (b a) (ks ks))+  (defstrand keyserver 2 (a a) (b b-1) (ks ks))   (precedes ((1 2) (0 0)) ((2 1) (1 1)) ((3 1) (1 1)))   (non-orig (privk a) (privk b) (privk ks))   (uniq-orig k)@@ -242,18 +204,16 @@       (send         (cat (enc b-0 (pubk b-0) (privk ks))           (enc b (pubk b) (privk ks)))))-    ((recv (cat a-0 a))+    ((recv (cat a b-1))       (send-        (cat (enc a (pubk a) (privk ks))-          (enc a-0 (pubk a-0) (privk ks))))))-  (label 7)+        (cat (enc b-1 (pubk b-1) (privk ks))+          (enc a (pubk a) (privk ks))))))+  (label 6)   (parent 3)-  (seen 8)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta))))-  (origs (k (1 2)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 2))))  (defskeleton denning-sacco   (vars (ta text) (b ks b-0 name) (k skey))@@ -280,7 +240,7 @@       (send         (cat (enc b-0 (pubk b-0) (privk ks))           (enc b (pubk b) (privk ks))))))-  (label 8)+  (label 7)   (parent 3)   (unrealized)   (shape)@@ -288,11 +248,11 @@   (origs (k (1 2))))  (defskeleton denning-sacco-  (vars (ta text) (a b ks a-0 b-0 name) (k skey))+  (vars (ta text) (a b ks b-0 a-0 name) (k skey))   (defstrand resp 1 (ta ta) (a a) (b b) (ks ks) (k k))   (defstrand init 3 (ta ta) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (a a-0) (b b) (ks ks))-  (defstrand keyserver 2 (a a) (b b-0) (ks ks))+  (defstrand keyserver 2 (a b) (b b-0) (ks ks))+  (defstrand keyserver 2 (a a-0) (b a) (ks ks))   (precedes ((1 2) (0 0)) ((2 1) (1 1)) ((3 1) (1 1)))   (non-orig (privk a) (privk b) (privk ks))   (uniq-orig k)@@ -308,22 +268,20 @@       (send         (enc (enc a b k ta (privk a)) (enc b (pubk b) (privk ks))           (enc a (pubk a) (privk ks)) (pubk b))))-    ((recv (cat a-0 b))-      (send-        (cat (enc b (pubk b) (privk ks))-          (enc a-0 (pubk a-0) (privk ks)))))-    ((recv (cat a b-0))+    ((recv (cat b b-0))       (send         (cat (enc b-0 (pubk b-0) (privk ks))-          (enc a (pubk a) (privk ks))))))-  (label 9)-  (parent 4)-  (seen 10)+          (enc b (pubk b) (privk ks)))))+    ((recv (cat a-0 a))+      (send+        (cat (enc a (pubk a) (privk ks))+          (enc a-0 (pubk a-0) (privk ks))))))+  (label 8)+  (parent 3)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta))))-  (origs (k (1 2)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 2))))  (defskeleton denning-sacco   (vars (ta text) (b ks a name) (k skey))@@ -348,7 +306,7 @@     ((recv (cat a b))       (send         (cat (enc b (pubk b) (privk ks)) (enc a (pubk a) (privk ks))))))-  (label 10)+  (label 9)   (parent 4)   (unrealized)   (shape)@@ -356,11 +314,11 @@   (origs (k (1 2))))  (defskeleton denning-sacco-  (vars (ta text) (a b ks a-0 a-1 name) (k skey))+  (vars (ta text) (a b ks a-0 b-0 name) (k skey))   (defstrand resp 1 (ta ta) (a a) (b b) (ks ks) (k k))   (defstrand init 3 (ta ta) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (a a-0) (b b) (ks ks))-  (defstrand keyserver 2 (a a-1) (b a) (ks ks))+  (defstrand keyserver 2 (a a) (b b-0) (ks ks))   (precedes ((1 2) (0 0)) ((2 1) (1 1)) ((3 1) (1 1)))   (non-orig (privk a) (privk b) (privk ks))   (uniq-orig k)@@ -380,18 +338,16 @@       (send         (cat (enc b (pubk b) (privk ks))           (enc a-0 (pubk a-0) (privk ks)))))-    ((recv (cat a-1 a))+    ((recv (cat a b-0))       (send-        (cat (enc a (pubk a) (privk ks))-          (enc a-1 (pubk a-1) (privk ks))))))-  (label 11)+        (cat (enc b-0 (pubk b-0) (privk ks))+          (enc a (pubk a) (privk ks))))))+  (label 10)   (parent 4)-  (seen 12)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta))))-  (origs (k (1 2)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 2))))  (defskeleton denning-sacco   (vars (ta text) (b ks a name) (k skey))@@ -416,11 +372,47 @@     ((recv (cat a b))       (send         (cat (enc b (pubk b) (privk ks)) (enc a (pubk a) (privk ks))))))-  (label 12)+  (label 11)   (parent 4)   (unrealized)   (shape)   (maps ((0) ((a b) (b b) (ks ks) (k k) (ta ta))))+  (origs (k (1 2))))++(defskeleton denning-sacco+  (vars (ta text) (a b ks a-0 a-1 name) (k skey))+  (defstrand resp 1 (ta ta) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ta ta) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (a a-0) (b b) (ks ks))+  (defstrand keyserver 2 (a a-1) (b a) (ks ks))+  (precedes ((1 2) (0 0)) ((2 1) (1 1)) ((3 1) (1 1)))+  (non-orig (privk a) (privk b) (privk ks))+  (uniq-orig k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a (pubk a) (privk ks)) (1 1))+  (traces+    ((recv+       (enc (enc a b k ta (privk a)) (enc b (pubk b) (privk ks))+         (enc a (pubk a) (privk ks)) (pubk b))))+    ((send (cat a b))+      (recv+        (cat (enc b (pubk b) (privk ks)) (enc a (pubk a) (privk ks))))+      (send+        (enc (enc a b k ta (privk a)) (enc b (pubk b) (privk ks))+          (enc a (pubk a) (privk ks)) (pubk b))))+    ((recv (cat a-0 b))+      (send+        (cat (enc b (pubk b) (privk ks))+          (enc a-0 (pubk a-0) (privk ks)))))+    ((recv (cat a-1 a))+      (send+        (cat (enc a (pubk a) (privk ks))+          (enc a-1 (pubk a-1) (privk ks))))))+  (label 12)+  (parent 4)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (ks ks) (k k) (ta ta))))   (origs (k (1 2))))  (comment "Nothing left to do")
tst/deorig_contract.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol deorig-contract basic
tst/deorig_mesg.tst view
@@ -1,6 +1,6 @@ (herald deorig-mesg) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol deorig-mesg basic
tst/deorig_simple.tst view
@@ -1,6 +1,6 @@ (herald deorig-simple) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol deorig-simple basic
tst/dh_cert.tst view
@@ -1,6 +1,6 @@ (herald "Diffie-Hellman with Certificate" (algebra diffie-hellman)) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol dh-cert diffie-hellman@@ -169,9 +169,8 @@               (exp (exp (gen) as-ltv) y)))))))   (label 1)   (parent 0)-  (seen 3)   (unrealized (1 2))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (gB gy base) (as-ltv bs-ltv x expn))@@ -227,7 +226,7 @@   (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1)) ((1 3) (0 3)))   (non-orig (privk ca))   (uniq-orig as-ltv bs-ltv x y)-  (operation encryption-test (added-strand init 3)+  (operation encryption-test (displaced 2 0 init 3)     (enc "tag1"       (cat (exp (gen) as-ltv)         (enc "cert" a (exp (gen) as-ltv) (privk "certify" ca))@@ -433,9 +432,8 @@       (send (cat (exp gB x) (exp gy as-ltv)))))   (label 5)   (parent 2)-  (seen 8 9)   (unrealized (2 0))-  (comment "5 in cohort - 3 not yet seen"))+  (comment "3 in cohort - 3 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (as-ltv bs-ltv x y expn))@@ -580,8 +578,7 @@   (precedes ((0 0) (2 0)) ((1 1) (0 3)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig as-ltv)-  (operation encryption-test (added-strand init 1) (exp (gen) as-ltv)-    (2 0))+  (operation encryption-test (displaced 3 0 init 1) (exp (gen) x) (2 0))   (traces     ((send        (cat (exp (gen) as-ltv)@@ -612,7 +609,7 @@   (parent 5)   (seen 14)   (unrealized (2 0))-  (comment "5 in cohort - 2 not yet seen"))+  (comment "3 in cohort - 2 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (gy base) (as-ltv bs-ltv x expn))@@ -623,7 +620,7 @@   (precedes ((0 0) (2 0)) ((1 1) (0 3)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig as-ltv x)-  (operation encryption-test (added-strand init 1) (exp (gen) x) (2 0))+  (operation encryption-test (displaced 3 0 init 1) (exp (gen) x) (2 0))   (traces     ((send        (cat (exp (gen) as-ltv)@@ -652,9 +649,9 @@       (send (cat (exp (gen) x) (exp gy as-ltv)))))   (label 9)   (parent 5)-  (seen 14 16)+  (seen 14)   (unrealized (2 0))-  (comment "5 in cohort - 2 not yet seen"))+  (comment "3 in cohort - 2 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (gB gy base) (as-ltv bs-ltv x expn))@@ -929,7 +926,7 @@   (precedes ((0 0) (2 0)) ((1 1) (0 3)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig as-ltv)-  (operation encryption-test (added-strand init 1) (exp (gen) as-ltv)+  (operation encryption-test (displaced 3 0 init 1) (exp (gen) as-ltv)     (2 0))   (traces     ((send@@ -1015,7 +1012,7 @@   (precedes ((0 0) (2 0)) ((1 1) (0 3)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig as-ltv x)-  (operation encryption-test (added-strand init 1) (exp (gen) as-ltv)+  (operation encryption-test (displaced 3 0 init 1) (exp (gen) as-ltv)     (2 0))   (traces     ((send@@ -1614,9 +1611,8 @@       (send (cat (exp gx bs-ltv) (exp gA y)))))   (label 28)   (parent 26)-  (seen 30 31)   (unrealized (2 0))-  (comment "5 in cohort - 3 not yet seen"))+  (comment "3 in cohort - 3 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (bs-ltv as-ltv y x expn))@@ -1669,7 +1665,7 @@   (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig bs-ltv y)-  (operation encryption-test (added-strand resp 2) (exp (gen) bs-ltv)+  (operation encryption-test (displaced 3 0 resp 2) (exp (gen) bs-ltv)     (2 0))   (traces     ((recv@@ -1699,9 +1695,8 @@       (send (cat (exp (gen) bs-ltv) (exp gA y)))))   (label 30)   (parent 28)-  (seen 34 35)   (unrealized (2 0))-  (comment "5 in cohort - 3 not yet seen"))+  (comment "3 in cohort - 3 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (gA base) (bs-ltv as-ltv expn))@@ -1712,7 +1707,7 @@   (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig bs-ltv)-  (operation encryption-test (added-strand resp 2) (exp (gen) bs-ltv)+  (operation encryption-test (displaced 3 0 resp 2) (exp (gen) bs-ltv)     (2 0))   (traces     ((recv@@ -1744,7 +1739,7 @@   (parent 28)   (seen 34)   (unrealized (2 0))-  (comment "5 in cohort - 1 not yet seen"))+  (comment "3 in cohort - 1 not yet seen"))  (defskeleton dh-cert   (vars (ca a b name) (gA gx base) (bs-ltv as-ltv y expn))@@ -1839,8 +1834,7 @@   (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig bs-ltv)-  (operation encryption-test (added-strand resp 2) (exp (gen) bs-ltv)-    (2 0))+  (operation encryption-test (displaced 3 0 resp 2) (exp (gen) y) (2 0))   (traces     ((recv        (cat (gen) (enc "cert" a (exp (gen) as-ltv) (privk "certify" ca))@@ -1883,7 +1877,7 @@   (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))   (non-orig (privk ca))   (uniq-orig bs-ltv y)-  (operation encryption-test (added-strand resp 2) (exp (gen) y) (2 0))+  (operation encryption-test (displaced 3 0 resp 2) (exp (gen) y) (2 0))   (traces     ((recv        (cat (gen) (enc "cert" a (exp (gen) as-ltv) (privk "certify" ca))
tst/dhke.tst view
@@ -1,6 +1,6 @@ (herald "Diffie-Hellman Key Exchange" (algebra diffie-hellman)) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol dhke diffie-hellman@@ -55,9 +55,8 @@     ((send (enc "i" (exp (gen) x) (privk a)))))   (label 1)   (parent 0)-  (seen 2)   (unrealized (0 2))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dhke   (vars (a b name) (x y expn))@@ -66,7 +65,7 @@   (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))   (non-orig (privk a) (privk b))   (uniq-orig x y)-  (operation encryption-test (added-strand init 3)+  (operation encryption-test (displaced 1 2 init 3)     (enc "i" a b (exp (exp (gen) x) y)) (0 2))   (traces     ((recv (enc "i" (exp (gen) x) (privk a)))@@ -215,9 +214,8 @@           (enc a-0 b (exp (exp (gen) y) x-0))))))   (label 7)   (parent 6)-  (seen 8)   (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dhke   (vars (a b name) (x y expn))@@ -226,7 +224,7 @@   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (privk a) (privk b))   (uniq-orig x y)-  (operation encryption-test (added-strand resp 2)+  (operation encryption-test (displaced 2 1 resp 2)     (enc a b (exp (exp (gen) x) y)) (0 1))   (traces     ((send (enc "i" (exp (gen) x) (privk a)))@@ -416,9 +414,8 @@     ((send (enc "i" (exp (gen) x) (privk a)))))   (label 15)   (parent 14)-  (seen 16)   (unrealized (0 2))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dhke-with-base-vars   (vars (a b name) (y x expn))@@ -427,7 +424,7 @@   (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))   (non-orig (privk a) (privk b))   (uniq-orig y x)-  (operation encryption-test (added-strand init 3)+  (operation encryption-test (displaced 1 2 init 3)     (enc "i" a b (exp (exp (gen) y) x)) (0 2))   (traces     ((recv (enc "i" (exp (gen) x) (privk a)))@@ -568,9 +565,8 @@       (send (cat (enc (exp (gen) y) (privk b)) (enc a-0 b (exp h y))))))   (label 21)   (parent 20)-  (seen 22)   (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dhke-with-base-vars   (vars (a b name) (x y expn))@@ -579,7 +575,7 @@   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (privk a) (privk b))   (uniq-orig x y)-  (operation encryption-test (added-strand resp 2)+  (operation encryption-test (displaced 2 1 resp 2)     (enc a b (exp (exp (gen) x) y)) (0 1))   (traces     ((send (enc "i" (exp (gen) x) (privk a)))@@ -706,10 +702,9 @@     ((recv hx) (send (exp (gen) y)) (recv (enc n (exp hx y)))))   (label 27)   (parent 26)-  (seen 28)   (unrealized (1 2))   (origs (y (1 1)) (x (0 0)) (n (0 2)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dh-mim-with-base-vars   (vars (n text) (x y expn))@@ -717,8 +712,8 @@   (defstrand resp 3 (n n) (hx (exp (gen) x)) (y y))   (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1)))   (uniq-orig n x y)-  (operation encryption-test (added-strand init 3)-    (enc n (exp (exp (gen) x) y)) (1 2))+  (operation encryption-test (displaced 2 0 init 3)+    (enc n (exp (exp (gen) y) x-0)) (1 2))   (traces     ((send (exp (gen) x)) (recv (exp (gen) y))       (send (enc n (exp (exp (gen) x) y))))@@ -746,9 +741,8 @@     ((recv (exp hx y)) (send (exp hx y))))   (label 29)   (parent 27)-  (seen 30)   (unrealized (1 2) (2 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dh-mim-with-base-vars   (vars (n text) (hy base) (x y expn))@@ -757,7 +751,7 @@   (deflistener (exp (gen) y))   (precedes ((0 2) (1 2)) ((1 1) (2 0)) ((2 1) (1 2)))   (uniq-orig n x y)-  (operation encryption-test (added-strand resp 2) (exp (gen) y) (2 0))+  (operation encryption-test (displaced 3 1 resp 2) (exp (gen) y) (2 0))   (traces ((send (exp (gen) x)) (recv hy) (send (enc n (exp hy x))))     ((recv (gen)) (send (exp (gen) y)) (recv (enc n (exp (gen) y))))     ((recv (exp (gen) y)) (send (exp (gen) y))))@@ -800,9 +794,8 @@     ((recv (exp hy x)) (send (exp hy x))))   (label 32)   (parent 30)-  (seen 33)   (unrealized (3 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dh-mim-with-base-vars   (vars (n text) (x y expn))@@ -813,7 +806,7 @@   (precedes ((0 0) (3 0)) ((0 2) (1 2)) ((1 1) (2 0)) ((2 1) (1 2))     ((3 1) (1 2)))   (uniq-orig n x y)-  (operation encryption-test (added-strand init 1) (exp (gen) x) (3 0))+  (operation encryption-test (displaced 4 0 init 1) (exp (gen) x) (3 0))   (traces     ((send (exp (gen) x)) (recv (gen)) (send (enc n (exp (gen) x))))     ((recv (gen)) (send (exp (gen) y)) (recv (enc n (exp (gen) y))))@@ -931,9 +924,8 @@     ((recv n) (send n)) ((recv (exp hy x)) (send (exp hy x))))   (label 39)   (parent 38)-  (seen 40)   (unrealized (2 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton dh-mim-with-base-vars   (vars (n text) (x expn))@@ -942,7 +934,7 @@   (deflistener (exp (gen) x))   (precedes ((0 0) (2 0)) ((0 2) (1 0)) ((2 1) (1 0)))   (uniq-orig n x)-  (operation encryption-test (added-strand init 1) (exp (gen) x) (2 0))+  (operation encryption-test (displaced 3 0 init 1) (exp (gen) x) (2 0))   (traces     ((send (exp (gen) x)) (recv (gen)) (send (enc n (exp (gen) x))))     ((recv n) (send n)) ((recv (exp (gen) x)) (send (exp (gen) x))))
tst/dy.tst view
@@ -1,1652 +1,1997 @@ (herald "Example 1.3 from 1983 Dolev-Yao Paper") -(comment "CPSA 2.2.8")-(comment "All input read")--(defprotocol dy basic-  (defrole init-    (vars (a b name) (m text))-    (trace (send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a)))))-  (defrole resp-    (vars (a b name) (m mesg))-    (trace (recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))))--(defskeleton dy-  (vars (m text) (a b name))-  (defstrand init 2 (m m) (a a) (b b))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a)))))-  (label 0)-  (unrealized (0 1))-  (origs (m (0 0)))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (b name))-  (defstrand init 2 (m m) (a b) (b b))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a b)) m (0 1)-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b)))))-  (label 1)-  (parent 0)-  (unrealized)-  (shape)-  (maps ((0) ((a b) (b b) (m m))))-  (origs (m (0 0))))--(defskeleton dy-  (vars (m text) (a b name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (0 1)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 2)-  (parent 0)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (m m))))-  (origs (m (0 0))))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (0 1)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0)))))-  (label 3)-  (parent 0)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (b a name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-0 b)) m (0 1) (enc m (pubk b))-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a)))))-  (label 4)-  (parent 3)-  (seen 1)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (0 1) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))-  (label 5)-  (parent 3)-  (seen 8)-  (unrealized (2 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-1 a)) m (2 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 6)-  (parent 5)-  (seen 2)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 7)-  (parent 5)-  (seen 12)-  (unrealized (2 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-1) (b b))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-1)) b (pubk a-1)))))-  (label 8)-  (parent 5)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (m m))))-  (origs (m (0 0))))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-1 a)) m (2 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 9)-  (parent 7)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))-  (label 10)-  (parent 7)-  (seen 11 14 15)-  (unrealized (2 0) (4 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 4 1 resp 2) m (2 0)-    (enc (enc m (pubk a-1)) b (pubk a-1))-    (enc (enc m (pubk b)) a-1 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 11)-  (parent 7)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-1) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-1)) b (pubk a-1)))))-  (label 12)-  (parent 7)-  (seen 6)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 13)-  (parent 9)-  (seen 2)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (4 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 14)-  (parent 10)-  (seen 18 20)-  (unrealized (2 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (4 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2)))))-  (label 15)-  (parent 10)-  (unrealized (3 0))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton dy-  (vars (m text) (b a name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 16)-  (parent 11)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 17)-  (parent 14)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (precedes ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (2 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)-    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a)))))-  (label 18)-  (parent 14)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 19)-  (parent 14)-  (seen 18 29)-  (unrealized (5 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2)))))-  (label 20)-  (parent 14)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)) ((4 1) (3 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 b)) m (3 0) (enc m (pubk b))-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1)))))-  (label 21)-  (parent 15)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (3 0) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))-  (label 22)-  (parent 15)-  (seen 23 33 34)-  (unrealized (5 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (3 0))-    ((3 1) (1 0)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 5 2 resp 2) m (3 0) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2)))))-  (label 23)-  (parent 15)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (b name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 24)-  (parent 16)-  (seen 1)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 25)-  (parent 17)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a a-0 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a)))))-  (label 26)-  (parent 18)-  (seen 24)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 27)-  (parent 19)-  (seen 30 41)-  (unrealized (5 0))-  (comment "7 in cohort - 5 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 4 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 28)-  (parent 19)-  (seen 30 40 45)-  (unrealized (5 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-3) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-3 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-3)) b (pubk a-3)))))-  (label 29)-  (parent 19)-  (seen 45)-  (unrealized (4 0))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (precedes ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (displaced 6 3 resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))-  (label 30)-  (parent 19)-  (seen 18)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-1) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-1)) b (pubk a-1)))))-  (label 31)-  (parent 20)-  (seen 6)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (b a a-0 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0)))))-  (label 32)-  (parent 21)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 33)-  (parent 22)-  (seen 52)-  (unrealized (4 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-3) (b b))-  (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)) ((4 1) (3 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-3 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-3)) b (pubk a-3)))))-  (label 34)-  (parent 22)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-1) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-1)) b (pubk a-1)))))-  (label 35)-  (parent 23)-  (seen 6)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 36)-  (parent 25)-  (seen 2)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 37)-  (parent 27)-  (seen 55 56)-  (unrealized (2 0))-  (comment "7 in cohort - 3 not yet seen"))--(comment "Strand bound exceeded--aborting run")--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((0 0) (7 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0))-    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 38)-  (parent 27)-  (unrealized (7 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 7 1 resp 2) m (5 0)-    (enc (enc m (pubk a-3)) b (pubk a-3))-    (enc (enc m (pubk b)) a-3 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 39)-  (parent 27)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (3 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 7 3 resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))-  (label 40)-  (parent 27)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-3) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-3 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-3)) b (pubk a-3)))))-  (label 41)-  (parent 27)-  (unrealized (4 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b)))))-  (label 42)-  (parent 28)-  (unrealized (2 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-3) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((4 1) (5 0))-    ((5 1) (2 0)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))-      (send (enc (enc m (pubk a-3)) a (pubk a-3))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 43)-  (parent 28)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 1 resp 2) m (5 0)-    (enc (enc m (pubk a-3)) b (pubk a-3))-    (enc (enc m (pubk b)) a-3 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))-  (label 44)-  (parent 28)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-3) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (1 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (5 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-3 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-3)) b (pubk a-3)))))-  (label 45)-  (parent 28)-  (unrealized (4 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-2) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((5 1) (4 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 b)) m (4 0) (enc m (pubk b))-    (enc (enc m (pubk b)) b (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-2)) b (pubk a-2)))))-  (label 46)-  (parent 29)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-2) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-3) (b b))-  (defstrand resp 2 (m m) (a a-4) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (4 0) (enc m (pubk b))-    (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))-      (send (enc (enc m (pubk a-2)) a (pubk a-2))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-3 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-3)) b (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))-      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))-  (label 47)-  (parent 29)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0)))))-  (label 48)-  (parent 32)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-3 a)) m (4 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 49)-  (parent 33)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (defstrand resp 2 (m m) (a a-3) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (4 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))-      (send (enc (enc m (pubk a-3)) b (pubk a-3))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))-  (label 50)-  (parent 33)-  (unrealized (4 0) (6 0))-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (b a a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a b) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (defstrand resp 2 (m m) (a b) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk b))-  (uniq-orig m)-  (operation nonce-test (displaced 6 3 resp 2) m (4 0)-    (enc (enc m (pubk a-3)) b (pubk a-3))-    (enc (enc m (pubk b)) a-3 (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) b (pubk b)))-      (recv (enc (enc m (pubk b)) b (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))-      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) b (pubk b)))-      (send (enc (enc m (pubk b)) b (pubk b)))))-  (label 51)-  (parent 33)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 a-3 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a-2) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-3) (b b))-  (precedes ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (4 0)-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))-      (send (enc (enc m (pubk a-2)) b (pubk a-2))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-3 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-3)) b (pubk a-3)))))-  (label 52)-  (parent 33)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))-  (defstrand resp 2 (m m) (a a-1) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation generalization deleted (1 0))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))-      (send (enc (enc m (pubk a-1)) b (pubk a-1))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2)))))-  (label 53)-  (parent 34)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a)))))-  (label 54)-  (parent 37)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a a-0 a-1 name))-  (defstrand init 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a-0) (b a))-  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (defstrand resp 2 (m m) (a a) (b a))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((5 1) (4 0)))-  (non-orig (privk a))-  (uniq-orig m)-  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)-    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))-  (traces-    ((send (enc (enc m (pubk a)) a (pubk a)))-      (recv (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))-      (send (enc (enc m (pubk a-0)) a (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a))))-    ((recv (enc (enc m (pubk a)) a (pubk a)))-      (send (enc (enc m (pubk a)) a (pubk a)))))-  (label 55)-  (parent 37)-  (unrealized)-  (comment "aborted"))--(defskeleton dy-  (vars (m text) (a b a-0 a-1 a-2 name))-  (defstrand init 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a a-0) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m m) (a b) (b a))-  (defstrand resp 2 (m m) (a a) (b b))-  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-2) (b b))-  (precedes ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((5 1) (4 0))-    ((6 1) (1 0)))-  (non-orig (privk a) (privk b))-  (uniq-orig m)-  (operation nonce-test (added-strand resp 2) m (2 0) (enc m (pubk a))-    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))-  (traces-    ((send (enc (enc m (pubk b)) a (pubk b)))-      (recv (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))-      (send (enc (enc m (pubk a-0)) b (pubk a-0))))-    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))-      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc m (pubk a)) b (pubk a)))-      (send (enc (enc m (pubk b)) a (pubk b))))-    ((recv (enc (enc m (pubk b)) a (pubk b)))-      (send (enc (enc m (pubk a)) b (pubk a))))-    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-2 (pubk b)))-      (send (enc (enc (enc m (pubk b)) a (pubk a-2)) b (pubk a-2)))))-  (label 56)-  (parent 37)+(comment "CPSA 2.2.9")+(comment "All input read")++(defprotocol dy basic+  (defrole init+    (vars (a b name) (m text))+    (trace (send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a)))))+  (defrole resp+    (vars (a b name) (m mesg))+    (trace (recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a)))))+  (label 0)+  (unrealized (0 1))+  (origs (m (0 0)))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b name))+  (defstrand init 2 (m m) (a b) (b b))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a b)) m (0 1)+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b)))))+  (label 1)+  (parent 0)+  (unrealized)+  (shape)+  (maps ((0) ((a b) (b b) (m m))))+  (origs (m (0 0))))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (0 1)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 2)+  (parent 0)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (m m))))+  (origs (m (0 0))))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (0 1)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0)))))+  (label 3)+  (parent 0)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (b a name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-0 b)) m (0 1) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a)))))+  (label 4)+  (parent 3)+  (seen 1)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (0 1) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 5)+  (parent 3)+  (seen 8)+  (unrealized (2 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-1 a)) m (2 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 6)+  (parent 5)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (2 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 7)+  (parent 5)+  (seen 12)+  (unrealized (2 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 3 1 resp 2) m (2 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 8)+  (parent 5)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (m m))))+  (origs (m (0 0))))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-1 a)) m (2 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 9)+  (parent 7)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 4 1 resp 2) m (2 0)+    (enc (enc m (pubk a-1)) b (pubk a-1))+    (enc (enc m (pubk b)) a-1 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 10)+  (parent 7)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (2 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 11)+  (parent 7)+  (seen 10 15 16)+  (unrealized (2 0) (4 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 4 1 resp 2) m (2 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 12)+  (parent 7)+  (seen 6)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 13)+  (parent 9)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (b a name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 14)+  (parent 10)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 3 resp 2) m (4 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 15)+  (parent 11)+  (seen 19 21)+  (unrealized (2 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 1 resp 2) m (4 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 16)+  (parent 11)+  (unrealized (4 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 17)+  (parent 14)+  (seen 1)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 18)+  (parent 15)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1)))))+  (label 19)+  (parent 15)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 20)+  (parent 15)+  (seen 19 29)+  (unrealized (5 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 1 resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 21)+  (parent 15)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 b)) m (4 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1)))))+  (label 22)+  (parent 16)+  (seen 10)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 5 3 resp 2) m (4 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2)))))+  (label 23)+  (parent 16)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (4 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 24)+  (parent 16)+  (seen 23 33 34)+  (unrealized (5 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0)))))+  (label 25)+  (parent 18)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-0) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-0)) a (pubk a-0)))))+  (label 26)+  (parent 19)+  (seen 4)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 3 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 27)+  (parent 20)+  (seen 30 40)+  (unrealized (5 0))+  (comment "7 in cohort - 5 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 28)+  (parent 20)+  (seen 30 38 44)+  (unrealized (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 29)+  (parent 20)+  (seen 40)+  (unrealized (5 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (displaced 6 4 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))+  (label 30)+  (parent 20)+  (seen 19)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 31)+  (parent 21)+  (seen 35)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (3 0)) ((2 1) (3 0))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1)))))+  (label 32)+  (parent 23)+  (seen 35)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 3 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 33)+  (parent 24)+  (seen 50)+  (unrealized (5 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 34)+  (parent 24)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-0) (b a))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-0 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-0)) a (pubk a-0)))))+  (label 35)+  (parent 25)+  (seen 2)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 36)+  (parent 27)+  (seen 53 54)+  (unrealized (2 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a-3)) b (pubk a-3))+    (enc (enc m (pubk b)) a-3 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 37)+  (parent 27)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 4 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 38)+  (parent 27)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 39)+  (parent 27)+  (seen 37 38 58)+  (unrealized (6 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 40)+  (parent 27)+  (seen 37)+  (unrealized (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 41)+  (parent 28)+  (seen 64 65)+  (unrealized (2 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (5 0)+    (enc (enc m (pubk a-3)) b (pubk a-3))+    (enc (enc m (pubk b)) a-3 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 42)+  (parent 28)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(comment "Strand bound exceeded--aborting run")++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 43)+  (parent 28)+  (unrealized (7 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 44)+  (parent 28)+  (unrealized (5 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk b)) b (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 45)+  (parent 29)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m m) (a a-4) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc m (pubk b)) a-4 (pubk b)))+      (send (enc (enc m (pubk a-4)) b (pubk a-4)))))+  (label 46)+  (parent 29)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 a)) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 47)+  (parent 33)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a-3)) b (pubk a-3))+    (enc (enc m (pubk b)) a-3 (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-1 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 48)+  (parent 33)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 49)+  (parent 33)+  (unrealized (5 0) (6 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (5 0)+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk b)) a-3 (pubk b)))+      (send (enc (enc m (pubk a-3)) b (pubk a-3)))))+  (label 50)+  (parent 33)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a-2 (pubk b)))+      (send (enc (enc m (pubk a-2)) b (pubk a-2)))))+  (label 51)+  (parent 34)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 52)+  (parent 36)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 53)+  (parent 36)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 1 resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 54)+  (parent 36)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1)))))+  (label 55)+  (parent 37)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (1 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation generalization deleted (1 0))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a-0 (pubk b)))+      (send (enc (enc m (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2)))))+  (label 56)+  (parent 38)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (7 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 57)+  (parent 39)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (6 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 58)+  (parent 39)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a-2) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-3) (b a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (displaced 7 4 resp 2) m (6 0)+    (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a-2 (pubk a)))+      (send (enc (enc m (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-3 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-3)) a (pubk a-3)))))+  (label 59)+  (parent 39)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-3 b)) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b)))))+  (label 60)+  (parent 40)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 6 4 resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3)))))+  (label 61)+  (parent 40)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 a-3 a-4 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a a-3) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-4) (b a))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (added-strand resp 2) m (5 0) (enc m (pubk b))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) a-3 (pubk a)))+      (send (enc (enc m (pubk a-3)) a (pubk a-3))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-4 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-4)) a (pubk a-4)))))+  (label 62)+  (parent 40)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (contracted (a-2 a)) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 63)+  (parent 41)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a a-0 a-1 name))+  (defstrand init 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a-0) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m (cat (enc m (pubk a)) a)) (a a-1) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (defstrand resp 2 (m m) (a a) (b a))+  (precedes ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 1) (1 0)) ((5 1) (4 0)))+  (non-orig (privk a))+  (uniq-orig m)+  (operation nonce-test (contracted (b a) (a-2 a-1)) m (2 0)+    (enc m (pubk a)) (enc (enc m (pubk a)) a (pubk a)))+  (traces+    ((send (enc (enc m (pubk a)) a (pubk a)))+      (recv (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a-0 (pubk a)))+      (send (enc (enc m (pubk a-0)) a (pubk a-0))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) a (pubk a)) a-1 (pubk a)))+      (send (enc (enc (enc m (pubk a)) a (pubk a-1)) a (pubk a-1))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a))))+    ((recv (enc (enc m (pubk a)) a (pubk a)))+      (send (enc (enc m (pubk a)) a (pubk a)))))+  (label 64)+  (parent 41)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (a b a-0 a-1 a-2 name))+  (defstrand init 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) a)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a a) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk a)) b)) (a a-2) (b a))+  (defstrand resp 2 (m m) (a b) (b a))+  (defstrand resp 2 (m m) (a a) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b))+  (uniq-orig m)+  (operation nonce-test (displaced 7 1 resp 2) m (2 0) (enc m (pubk a))+    (enc (enc m (pubk a)) b (pubk a)) (enc (enc m (pubk b)) a (pubk b)))+  (traces+    ((send (enc (enc m (pubk b)) a (pubk b)))+      (recv (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk b)) a (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) a (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a))))+    ((recv (enc (enc (enc m (pubk a)) b (pubk a)) a-2 (pubk a)))+      (send (enc (enc (enc m (pubk a)) b (pubk a-2)) a (pubk a-2))))+    ((recv (enc (enc m (pubk a)) b (pubk a)))+      (send (enc (enc m (pubk b)) a (pubk b))))+    ((recv (enc (enc m (pubk b)) a (pubk b)))+      (send (enc (enc m (pubk a)) b (pubk a)))))+  (label 65)+  (parent 41)+  (unrealized)+  (comment "aborted"))++(defskeleton dy+  (vars (m text) (b a a-0 a-1 name))+  (defstrand init 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (defstrand resp 2 (m (cat (enc m (pubk b)) b)) (a a-0) (b b))+  (defstrand resp 2 (m m) (a a-1) (b b))+  (defstrand resp 2 (m m) (a b) (b b))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk b))+  (uniq-orig m)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc (enc m (pubk b)) b (pubk b)))+      (recv (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a)) b (pubk a))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b))))+    ((recv (enc (enc (enc m (pubk b)) b (pubk b)) a-0 (pubk b)))+      (send (enc (enc (enc m (pubk b)) b (pubk a-0)) b (pubk a-0))))+    ((recv (enc (enc m (pubk b)) a-1 (pubk b)))+      (send (enc (enc m (pubk a-1)) b (pubk a-1))))+    ((recv (enc (enc m (pubk b)) b (pubk b)))+      (send (enc (enc m (pubk b)) b (pubk b)))))+  (label 66)+  (parent 42)   (unrealized)   (comment "aborted"))
tst/encsig.tst view
@@ -1,7 +1,7 @@ (herald "Encrypted Signed Message Example"   (comment "Shows examples of key usage of asymmetric keys")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol mult-keys-enc-sig basic@@ -100,47 +100,45 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton mult-keys-enc-sig-  (vars (n2 n1 n1-0 text) (a b name))+  (vars (n2 n1 text) (a b name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 1 (n1 n1) (a a) (b b))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))   (non-orig (privk "sig" a))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3)+  (operation encryption-test (displaced 1 2 init 3)     (enc (enc n2 (pubk "enc" b)) (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (send (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1-0 a (pubk "enc" b)) (privk "sig" a)))-      (recv (enc (enc n1-0 n2 (pubk "enc" a)) (privk "sig" b)))+    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))+      (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))   (label 4)   (parent 3)-  (seen 5)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 1))))  (defskeleton mult-keys-enc-sig-  (vars (n2 n1 text) (a b name))+  (vars (n2 n1 n1-0 text) (a b name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))+  (defstrand init 1 (n1 n1) (a a) (b b))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))+  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))   (non-orig (privk "sig" a))   (uniq-orig n2)-  (operation encryption-test (displaced 1 2 init 3)+  (operation encryption-test (added-strand init 3)     (enc (enc n2 (pubk "enc" b)) (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (send (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))-      (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))+    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a))))+    ((send (enc (enc n1-0 a (pubk "enc" b)) (privk "sig" a)))+      (recv (enc (enc n1-0 n2 (pubk "enc" a)) (privk "sig" b)))       (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))   (label 5)   (parent 3)@@ -248,29 +246,6 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton mult-keys-enc-sig-  (vars (n2 n1 n1-0 text) (a b name))-  (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 1 (n1 n1) (a a) (b b))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))-  (non-orig (privk "enc" a) (privk "sig" a))-  (uniq-orig n2)-  (operation encryption-test (added-strand init 3)-    (enc (enc n2 (pubk "enc" b)) (privk "sig" a)) (0 2))-  (traces-    ((recv (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))-      (send (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))-      (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1-0 a (pubk "enc" b)) (privk "sig" a)))-      (recv (enc (enc n1-0 n2 (pubk "enc" a)) (privk "sig" b)))-      (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))-  (label 10)-  (parent 9)-  (unrealized (2 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton mult-keys-enc-sig   (vars (n2 n1 text) (a b name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))@@ -286,7 +261,7 @@     ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))-  (label 11)+  (label 10)   (parent 9)   (unrealized)   (shape)@@ -294,62 +269,52 @@   (origs (n2 (0 1))))  (defskeleton mult-keys-enc-sig-  (vars (n2 n1 text) (a b name))+  (vars (n2 n1 n1-0 text) (a b name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))   (defstrand init 1 (n1 n1) (a a) (b b))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))   (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (contracted (n1-0 n1)) n2 (2 1)-    (enc n1 n2 (pubk "enc" a)))+  (operation encryption-test (added-strand init 3)+    (enc (enc n2 (pubk "enc" b)) (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (send (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))     ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))-      (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))+    ((send (enc (enc n1-0 a (pubk "enc" b)) (privk "sig" a)))+      (recv (enc (enc n1-0 n2 (pubk "enc" a)) (privk "sig" b)))       (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))-  (label 12)-  (parent 10)-  (seen 11)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (label 11)+  (parent 9)+  (unrealized (2 1))+  (comment "3 in cohort - 3 not yet seen"))  (defskeleton mult-keys-enc-sig-  (vars (n2 n1 n1-0 text) (a b b-0 name))+  (vars (n2 n1 text) (a b name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))   (defstrand init 1 (n1 n1) (a a) (b b))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))-  (precedes ((0 1) (3 1)) ((1 0) (0 0)) ((2 2) (0 2)) ((3 2) (2 1)))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (added-strand init 3) n2 (2 1)+  (operation nonce-test (contracted (n1-0 n1)) n2 (2 1)     (enc n1 n2 (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (send (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))     ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1-0 a (pubk "enc" b)) (privk "sig" a)))-      (recv (enc (enc n1-0 n2 (pubk "enc" a)) (privk "sig" b)))-      (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1 a (pubk "enc" b-0)) (privk "sig" a)))-      (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b-0)))-      (send (enc (enc n2 (pubk "enc" b-0)) (privk "sig" a)))))-  (label 13)-  (parent 10)-  (seen 14)+    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))+      (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))+      (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))+  (label 12)+  (parent 11)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 1)))-  (comment "2 in cohort - 1 not yet seen"))+  (origs (n2 (0 1))))  (defskeleton mult-keys-enc-sig   (vars (n2 n1 n1-0 text) (a b name))@@ -371,35 +336,39 @@     ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a)))))-  (label 14)-  (parent 10)-  (seen 11)+  (label 13)+  (parent 11)+  (seen 10)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))  (defskeleton mult-keys-enc-sig-  (vars (n2 n1 text) (a b b-0 name))+  (vars (n2 n1 n1-0 text) (a b b-0 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (defstrand init 1 (n1 n1) (a a) (b b))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((1 2) (0 2)) ((2 2) (1 1)))+  (precedes ((0 1) (3 1)) ((1 0) (0 0)) ((2 2) (0 2)) ((3 2) (2 1)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation collapsed 1 2)+  (operation nonce-test (added-strand init 3) n2 (2 1)+    (enc n1 n2 (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))       (send (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))       (recv (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))-    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a)))-      (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b)))+    ((send (enc (enc n1 a (pubk "enc" b)) (privk "sig" a))))+    ((send (enc (enc n1-0 a (pubk "enc" b)) (privk "sig" a)))+      (recv (enc (enc n1-0 n2 (pubk "enc" a)) (privk "sig" b)))       (send (enc (enc n2 (pubk "enc" b)) (privk "sig" a))))     ((send (enc (enc n1 a (pubk "enc" b-0)) (privk "sig" a)))       (recv (enc (enc n1 n2 (pubk "enc" a)) (privk "sig" b-0)))       (send (enc (enc n2 (pubk "enc" b-0)) (privk "sig" a)))))-  (label 15)-  (parent 13)-  (seen 11)+  (label 14)+  (parent 11)   (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (shape)+  (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+  (origs (n2 (0 1))))  (comment "Nothing left to do")
tst/epmo-hash.tst view
@@ -1,7 +1,7 @@ (herald "Electronic Purchase with Money Order Protocol with Key Hashing"   (comment "Annotated with trust management formulas")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol epmo basic@@ -163,9 +163,8 @@           (enc nc nb (pubk c))))))   (label 3)   (parent 2)-  (seen 4)   (unrealized (2 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (goods price text) (nb nc nm data) (b c m name))@@ -177,7 +176,7 @@   (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nb nc nm)-  (operation nonce-test (added-strand customer 3) nc (2 0)+  (operation nonce-test (displaced 3 0 customer 3) nc (2 0)     (enc nc nm m goods price (pubk c)) (enc c nc goods price (pubk m)))   (traces     ((send (enc c nc goods price (pubk m)))@@ -304,9 +303,8 @@       (send (enc (hash b nb nm) (privk m)))))   (label 6)   (parent 5)-  (seen 7)   (unrealized (1 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nc nm nb data) (b c m name))@@ -317,8 +315,8 @@   (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nm nb)-  (operation encryption-test (added-strand bank 2)-    (enc (hash c nc nb nm price) (privk b)) (1 2))+  (operation encryption-test (displaced 2 0 bank 2)+    (enc (hash c-0 nc-0 nb nm price-0) (privk b)) (1 2))   (traces     ((recv (enc c nc nm price (pubk b)))       (send@@ -366,9 +364,8 @@       (send (cat (enc (hash c nc nb nm-0 price-0) (privk b-0)) nb))))   (label 8)   (parent 7)-  (seen 9)   (unrealized (0 0) (2 3))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton epmo   (vars (price goods goods-0 text) (nc nm nb data) (b c m b-0 m-0 name))@@ -382,8 +379,8 @@     ((2 0) (1 0)) ((2 4) (1 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nc nm nb)-  (operation encryption-test (added-strand bank 2)-    (hash c nc nb nm price) (2 3))+  (operation encryption-test (displaced 3 0 bank 2)+    (hash c nc nb nm-0 price-0) (2 3))   (traces     ((recv (enc c nc nm price (pubk b)))       (send@@ -476,9 +473,8 @@       (send (cat (enc (hash c nc nb nm price) (privk b-0)) nb))))   (label 11)   (parent 9)-  (seen 12)   (unrealized (0 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nc nm nb data) (b c m b-0 name))@@ -492,7 +488,7 @@     ((2 2) (0 0)) ((2 4) (1 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nc nm nb)-  (operation nonce-test (added-strand customer 3) nm (0 0)+  (operation nonce-test (displaced 3 2 customer 3) nm (0 0)     (enc nc nm m goods price (pubk c)))   (traces     ((recv (enc c nc nm price (pubk b)))@@ -645,9 +641,8 @@       (send (enc c nc nm price (pubk b-0)))))   (label 15)   (parent 14)-  (seen 16)   (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (goods price text) (nb nc nm data) (b c b-0 m name))@@ -660,7 +655,7 @@     ((2 4) (0 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nb nc nm)-  (operation nonce-test (added-strand customer 5) nb (0 2)+  (operation nonce-test (displaced 2 3 customer 5) nb (0 2)     (enc nc nb (pubk c)))   (traces     ((recv (enc c nc goods price (pubk m)))
tst/epmo-key-hash.tst view
@@ -1,7 +1,7 @@ (herald "Electronic Purchase with Money Order Protocol with Key Hashing"   (comment "Annotated with trust management formulas")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol epmo basic@@ -170,9 +170,8 @@           (enc nc nb (pubk c))))))   (label 3)   (parent 2)-  (seen 4)   (unrealized (2 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (goods price text) (nb nc nm data) (b c m name))@@ -184,7 +183,7 @@   (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nb nc nm)-  (operation nonce-test (added-strand customer 3) nc (2 0)+  (operation nonce-test (displaced 3 0 customer 3) nc (2 0)     (enc nc nm m goods price (pubk c)) (enc c nc goods price (pubk m)))   (traces     ((send (enc c nc goods price (pubk m)))@@ -318,9 +317,8 @@           nb)) (send (enc (enc "hash" (cat b nb nm)) (privk m)))))   (label 6)   (parent 5)-  (seen 7)   (unrealized (1 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nc nm nb data) (b c m name))@@ -331,8 +329,8 @@   (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nm nb)-  (operation encryption-test (added-strand bank 2)-    (enc (enc "hash" (cat c nc nb nm price)) (privk b)) (1 2))+  (operation encryption-test (displaced 2 0 bank 2)+    (enc (enc "hash" (cat c-0 nc-0 nb nm price-0)) (privk b)) (1 2))   (traces     ((recv (enc c nc nm price (pubk b)))       (send@@ -386,9 +384,8 @@           nb))))   (label 8)   (parent 7)-  (seen 9)   (unrealized (0 0) (2 3))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton epmo   (vars (price goods goods-0 text) (nc nm nb data) (b c m b-0 m-0 name))@@ -402,8 +399,8 @@     ((2 0) (1 0)) ((2 4) (1 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nc nm nb)-  (operation encryption-test (added-strand bank 2)-    (enc "hash" (cat c nc nb nm price)) (2 3))+  (operation encryption-test (displaced 3 0 bank 2)+    (enc "hash" (cat c nc nb nm-0 price-0)) (2 3))   (traces     ((recv (enc c nc nm price (pubk b)))       (send@@ -508,9 +505,8 @@           nb))))   (label 11)   (parent 9)-  (seen 12)   (unrealized (0 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nc nm nb data) (b c m b-0 name))@@ -524,7 +520,7 @@     ((2 2) (0 0)) ((2 4) (1 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nc nm nb)-  (operation nonce-test (added-strand customer 3) nm (0 0)+  (operation nonce-test (displaced 3 2 customer 3) nm (0 0)     (enc nc nm m goods price (pubk c)))   (traces     ((recv (enc c nc nm price (pubk b)))@@ -687,9 +683,8 @@       (send (enc c nc nm price (pubk b-0)))))   (label 15)   (parent 14)-  (seen 16)   (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (goods price text) (nb nc nm data) (b c b-0 m name))@@ -702,7 +697,7 @@     ((2 4) (0 2)))   (non-orig (privk b) (privk c) (privk m))   (uniq-orig nb nc nm)-  (operation nonce-test (added-strand customer 5) nb (0 2)+  (operation nonce-test (displaced 2 3 customer 5) nb (0 2)     (enc nc nb (pubk c)))   (traces     ((recv (enc c nc goods price (pubk m)))
tst/epmo.tst view
@@ -1,7 +1,7 @@ (herald "Electronic Purchase with Money Order Protocol"   (comment "Annotated with trust management formulas")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol epmo basic@@ -169,9 +169,8 @@           (enc nc nb (pubk c))))))   (label 3)   (parent 2)-  (seen 4)   (unrealized (2 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (goods price text) (nb nc nm data) (b c m name) (hash akey))@@ -184,7 +183,7 @@   (precedes ((0 0) (1 0)) ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (invk hash) (privk b) (privk c) (privk m))   (uniq-orig nb nc nm)-  (operation nonce-test (added-strand customer 3) nc (2 0)+  (operation nonce-test (displaced 3 0 customer 3) nc (2 0)     (enc nc nm m goods price (pubk c)) (enc c nc goods price (pubk m)))   (traces     ((send (enc c nc goods price (pubk m)))@@ -317,9 +316,8 @@       (send (enc (enc b nb nm hash) (privk m)))))   (label 6)   (parent 5)-  (seen 7)   (unrealized (1 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nc nm nb data) (b c m name) (hash akey))@@ -330,8 +328,8 @@   (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))   (non-orig (invk hash) (privk b) (privk c) (privk m))   (uniq-orig nm nb)-  (operation encryption-test (added-strand bank 2)-    (enc (enc c nc nb nm price hash) (privk b)) (1 2))+  (operation encryption-test (displaced 2 0 bank 2)+    (enc (enc c-0 nc-0 nb nm price-0 hash) (privk b)) (1 2))   (traces     ((recv (enc c nc nm price (pubk b)))       (send@@ -417,9 +415,8 @@       (send (cat (enc (enc c nc nb nm price hash) (privk b-0)) nb))))   (label 9)   (parent 8)-  (seen 10)   (unrealized (0 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nc nm nb data) (b c m b-0 name) (hash akey))@@ -433,7 +430,7 @@     ((2 2) (0 0)) ((2 4) (1 2)))   (non-orig (invk hash) (privk b) (privk c) (privk m))   (uniq-orig nc nm nb)-  (operation nonce-test (added-strand customer 3) nm (0 0)+  (operation nonce-test (displaced 3 2 customer 3) nm (0 0)     (enc nc nm m goods price (pubk c)))   (traces     ((recv (enc c nc nm price (pubk b)))@@ -596,9 +593,8 @@       (send (enc c nc nm price (pubk b-0)))))   (label 13)   (parent 12)-  (seen 14)   (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo   (vars (price goods text) (nb nc nm data) (b c b-0 m name) (hash akey))@@ -612,7 +608,7 @@     ((2 4) (0 2)))   (non-orig (invk hash) (privk b) (privk c) (privk m))   (uniq-orig nb nc nm)-  (operation nonce-test (added-strand customer 5) nb (0 2)+  (operation nonce-test (displaced 2 3 customer 5) nb (0 2)     (enc nc nb (pubk c)) (enc c nc nb nm price hash))   (traces     ((recv (enc c nc goods price (pubk m)))
tst/epmo_acctnum-key-hash.scm view
@@ -1,5 +1,4 @@ (herald "Electronic Purchase with Money Order Protocol Variant with Key Hashing"-  (displacement)   (comment "This version includes account numbers in exchanges"))  ;; The results of running CPSA on this input produces interesting
tst/epmo_acctnum-key-hash.tst view
@@ -1,11 +1,9 @@ (herald   "Electronic Purchase with Money Order Protocol Variant with Key Hashing"-  (displacement)   (comment "This version includes account numbers in exchanges")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")-(comment "Displacement disabled")  (defprotocol epmo_acctnum basic   (defrole bank@@ -265,7 +263,7 @@     ((2 4) (0 2)))   (non-orig (privk c) (privk b) (privk m))   (uniq-orig nc nb nm)-  (operation nonce-test (added-strand customer 5) nb (0 2)+  (operation nonce-test (displaced 2 3 customer 5) nb (0 2)     (enc nc nb (pubk c)))   (traces     ((recv (enc c nc goods (pubk m)))@@ -345,7 +343,7 @@     ((3 2) (1 0)) ((3 4) (0 2)))   (non-orig (privk c) (privk b) (privk m))   (uniq-orig nc nb nm nm-0)-  (operation nonce-test (added-strand customer 5) nb (0 2)+  (operation nonce-test (displaced 2 4 customer 5) nb (0 2)     (enc nc nb (pubk c)))   (traces     ((recv (enc c nc goods (pubk m)))@@ -501,8 +499,8 @@   (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))   (non-orig (privk b) (privk m) (privk c))   (uniq-orig nm nb nc)-  (operation encryption-test (added-strand bank 2)-    (enc (enc "hash" (cat c nc nb nm price)) (privk b)) (1 2))+  (operation encryption-test (displaced 2 0 bank 2)+    (enc (enc "hash" (cat c-0 nc-0 nb nm price-0)) (privk b)) (1 2))   (traces     ((recv (enc c nc nm acctnum price (pubk b)))       (send@@ -573,8 +571,8 @@     ((2 0) (1 0)) ((2 4) (1 2)))   (non-orig (privk b) (privk m) (privk c))   (uniq-orig nm nb nc)-  (operation encryption-test (added-strand bank 2)-    (enc (enc "hash" (cat c nc nb nm price)) (privk b)) (2 3))+  (operation encryption-test (displaced 3 0 bank 2)+    (enc (enc "hash" (cat c nc nb nm-0 price-0)) (privk b-0)) (2 3))   (traces     ((recv (enc c nc nm acctnum price (pubk b)))       (send@@ -674,7 +672,7 @@   (label 15)   (parent 14)   (unrealized (0 0))-  (comment "1 in cohort - 1 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton epmo_acctnum   (vars@@ -721,6 +719,46 @@   (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo_acctnum+  (vars (nb nc acctnum price acctnum-0 goods text) (b m c name))+  (defstrand bank 3 (acctnum acctnum) (nc nc) (nm acctnum-0) (nb nb)+    (price price) (b b) (c c) (m m))+  (defstrand merchant 4 (nb nb) (nc nc) (nm acctnum-0) (goods goods)+    (price price) (b b) (c c) (m m))+  (defstrand customer 5 (acctnum acctnum-0) (nb nb) (nc nc)+    (nm acctnum-0) (goods goods) (price price) (b b) (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (0 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c))+  (uniq-orig nb nc acctnum-0)+  (operation nonce-test (displaced 3 2 customer 3) nm (0 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc acctnum-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" (cat b m nb acctnum-0)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc acctnum-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          nb))+      (send (enc (enc "hash" (cat b m nb acctnum-0)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc acctnum-0 m price (pubk c)))+      (send (enc c nc acctnum-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          nb))))+  (label 17)+  (parent 15)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton epmo_acctnum   (vars (nm nb nc acctnum price acctnum-0 goods text) (b m c name))   (defstrand bank 3 (acctnum acctnum) (nc nc) (nm nm) (nb nb)     (price price) (b b) (c c) (m m))@@ -732,7 +770,7 @@     ((2 2) (0 0)) ((2 4) (1 2)))   (non-orig (privk b) (privk m) (privk c))   (uniq-orig nm nb nc)-  (operation nonce-test (added-strand customer 3) nm (0 0)+  (operation nonce-test (displaced 3 2 customer 3) nm (0 0)     (enc nc nm m price (pubk c)))   (traces     ((recv (enc c nc nm acctnum price (pubk b)))@@ -753,7 +791,7 @@           (enc nc nb (pubk c))))       (send         (cat (enc (enc "hash" (cat c nc nb nm price)) (privk b)) nb))))-  (label 17)+  (label 18)   (parent 15)   (unrealized (0 0))   (comment "1 in cohort - 1 not yet seen"))@@ -796,12 +834,53 @@         (cat (enc (enc "hash" (cat c nc nb nm price)) (privk b)) nb)))     ((recv (enc c nc goods (pubk m)))       (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 18)+  (label 19)   (parent 16)   (unrealized (0 0))-  (comment "1 in cohort - 1 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton epmo_acctnum+  (vars (nb nc price acctnum goods text) (b m c name))+  (defstrand bank 3 (acctnum acctnum) (nc nc) (nm acctnum) (nb nb)+    (price price) (b b) (c c) (m m))+  (defstrand merchant 4 (nb nb) (nc nc) (nm acctnum) (goods goods)+    (price price) (b b) (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (nb nb) (nc nc) (nm acctnum)+    (goods goods) (price price) (b b) (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (0 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c))+  (uniq-orig nb nc acctnum)+  (operation nonce-test (contracted (acctnum-0 acctnum)) acctnum (0 0)+    (enc nc acctnum m price (pubk c))+    (enc c nc acctnum acctnum price (pubk b)))+  (traces+    ((recv (enc c nc acctnum acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" (cat b m nb acctnum)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc acctnum m price (pubk c)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          nb)) (send (enc (enc "hash" (cat b m nb acctnum)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc acctnum m price (pubk c)))+      (send (enc c nc acctnum acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          nb))))+  (label 20)+  (parent 17)+  (seen 21)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton epmo_acctnum   (vars (nm nb nc price acctnum goods text) (b m c name))   (defstrand bank 3 (acctnum acctnum) (nc nc) (nm nm) (nb nb)     (price price) (b b) (c c) (m m))@@ -834,8 +913,8 @@           (enc nc nb (pubk c))))       (send         (cat (enc (enc "hash" (cat c nc nb nm price)) (privk b)) nb))))-  (label 19)-  (parent 17)+  (label 21)+  (parent 18)   (unrealized)   (shape)   (maps@@ -845,6 +924,51 @@   (origs (nc (2 0)) (nm (1 1)) (nb (0 1))))  (defskeleton epmo_acctnum+  (vars (nb nc acctnum price acctnum-0 goods nm price-0 text)+    (b m c name))+  (defstrand bank 3 (acctnum acctnum) (nc nc) (nm acctnum-0) (nb nb)+    (price price) (b b) (c c) (m m))+  (defstrand merchant 4 (nb nb) (nc nc) (nm acctnum-0) (goods goods)+    (price price) (b b) (c c) (m m))+  (defstrand customer 5 (acctnum acctnum-0) (nb nb) (nc nc)+    (nm acctnum-0) (goods goods) (price price) (b b) (c c) (m m))+  (defstrand merchant 2 (nc nc) (nm nm) (goods goods) (price price-0)+    (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c))+  (uniq-orig nb nc acctnum-0 nm)+  (operation nonce-test (displaced 4 2 customer 3) nm-0 (0 0)+    (enc nc nm-0 m price (pubk c)))+  (traces+    ((recv (enc c nc acctnum-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" (cat b m nb acctnum-0)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc acctnum-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          nb))+      (send (enc (enc "hash" (cat b m nb acctnum-0)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc acctnum-0 m price (pubk c)))+      (send (enc c nc acctnum-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum-0 price)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 22)+  (parent 19)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton epmo_acctnum   (vars (nm nb nc acctnum price acctnum-0 goods nm-0 price-0 text)     (b m c name))   (defstrand bank 3 (acctnum acctnum) (nc nc) (nm nm) (nb nb)@@ -859,7 +983,7 @@     ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))   (non-orig (privk b) (privk m) (privk c))   (uniq-orig nm nb nc nm-0)-  (operation nonce-test (added-strand customer 3) nm (0 0)+  (operation nonce-test (displaced 4 2 customer 3) nm (0 0)     (enc nc nm m price (pubk c)))   (traces     ((recv (enc c nc nm acctnum price (pubk b)))@@ -882,12 +1006,57 @@         (cat (enc (enc "hash" (cat c nc nb nm price)) (privk b)) nb)))     ((recv (enc c nc goods (pubk m)))       (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 20)-  (parent 18)+  (label 23)+  (parent 19)   (unrealized (0 0))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton epmo_acctnum+  (vars (nb nc price acctnum goods nm price-0 text) (b m c name))+  (defstrand bank 3 (acctnum acctnum) (nc nc) (nm acctnum) (nb nb)+    (price price) (b b) (c c) (m m))+  (defstrand merchant 4 (nb nb) (nc nc) (nm acctnum) (goods goods)+    (price price) (b b) (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (nb nb) (nc nc) (nm acctnum)+    (goods goods) (price price) (b b) (c c) (m m))+  (defstrand merchant 2 (nc nc) (nm nm) (goods goods) (price price-0)+    (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c))+  (uniq-orig nb nc acctnum nm)+  (operation nonce-test (contracted (acctnum-0 acctnum)) acctnum (0 0)+    (enc nc acctnum m price (pubk c))+    (enc c nc acctnum acctnum price (pubk b)))+  (traces+    ((recv (enc c nc acctnum acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" (cat b m nb acctnum)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc acctnum m price (pubk c)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          nb)) (send (enc (enc "hash" (cat b m nb acctnum)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc acctnum m price (pubk c)))+      (send (enc c nc acctnum acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" (cat c nc nb acctnum price)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 24)+  (parent 22)+  (seen 20)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton epmo_acctnum   (vars (nm nb nc price acctnum goods nm-0 price-0 text) (b m c name))   (defstrand bank 3 (acctnum acctnum) (nc nc) (nm nm) (nb nb)     (price price) (b b) (c c) (m m))@@ -924,9 +1093,9 @@         (cat (enc (enc "hash" (cat c nc nb nm price)) (privk b)) nb)))     ((recv (enc c nc goods (pubk m)))       (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 21)-  (parent 20)-  (seen 19)+  (label 25)+  (parent 23)+  (seen 21)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/epmo_acctnum.scm view
@@ -1,5 +1,5 @@ (herald "Electronic Purchase with Money Order Protocol Variant"-  (displacement)+  (bound 12)   (comment "This version includes account numbers in exchanges"))  ;; The results of running CPSA on this input produces interesting
tst/epmo_acctnum.tst view

file too large to diff

tst/ffgg.tst view
@@ -1,7 +1,7 @@ (herald "The ffgg Protocol"   (comment "From A Necessarily Parallel Attack by Jon K. Millen")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol ffgg basic@@ -91,9 +91,8 @@       (send (cat n2 m (enc m n1 n2 (pubk b))))))   (label 3)   (parent 2)-  (seen 4)   (unrealized (3 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton ffgg   (vars (m n1 n2 x y n2-0 n2-1 text) (b a a-0 a-1 name))@@ -105,7 +104,7 @@     ((3 3) (1 0)))   (non-orig (privk b))   (uniq-orig m n1 n2 n2-0 n2-1)-  (operation nonce-test (added-strand resp 4) m (3 2)+  (operation nonce-test (displaced 4 2 resp 4) m (3 2)     (enc n1 n2 m (pubk b)))   (traces     ((send a) (recv (cat b n1 n2)) (send (cat a (enc n1 n2 m (pubk b))))
tst/fragile_pruning.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol fragile_pruning basic@@ -124,9 +124,8 @@     ((recv (enc n new new new k)) (send (enc n new new new n k))))   (label 5)   (parent 4)-  (seen 6)   (unrealized (2 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton fragile_pruning   (vars (n new text) (k akey))@@ -136,7 +135,7 @@   (precedes ((0 0) (1 0)) ((0 4) (2 0)) ((1 1) (0 1)) ((2 1) (0 5)))   (non-orig (invk k))   (uniq-orig n new)-  (operation nonce-test (added-strand init 5) n (2 0) (enc n k)+  (operation nonce-test (displaced 3 0 init 5) n (2 0) (enc n k)     (enc n new k))   (traces     ((send (enc n k)) (recv (enc n new k)) (recv (enc n new k))
tst/hashtest-key-hash.tst view
@@ -1,6 +1,6 @@ (herald "Hashtest") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol hashtest basic
tst/hashtest.tst view
@@ -1,6 +1,6 @@ (herald "Hashtest") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol hashtest basic
tst/isoreject.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol isoreject basic@@ -41,9 +41,8 @@       (send (enc nc nb b (privk a)))))   (label 1)   (parent 0)-  (seen 3)   (unrealized (1 1))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton isoreject   (vars (na nb nc text) (a b name))@@ -72,8 +71,8 @@   (precedes ((0 1) (1 1)) ((1 2) (0 2)))   (non-orig (privk a) (privk b))   (uniq-orig nb)-  (operation encryption-test (added-strand resp 2)-    (enc nb na a (privk b)) (1 1))+  (operation encryption-test (displaced 2 0 resp 2)+    (enc nb na-0 a (privk b)) (1 1))   (traces     ((recv (cat a na)) (send (enc nb na a (privk b)))       (recv (enc nc nb b (privk a))))
tst/kelly1.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol kelly1 basic@@ -105,9 +105,8 @@           (pubk S)))))   (label 2)   (parent 1)-  (seen 3)   (unrealized (0 1))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton kelly1   (vars@@ -124,7 +123,7 @@   (precedes ((1 1) (2 1)) ((1 4) (0 3)) ((2 2) (1 2)) ((2 4) (0 1)))   (non-orig (privk A) (privk S) (privk AIK))   (uniq-orig Ns N)-  (operation encryption-test (added-strand server 5)+  (operation encryption-test (displaced 2 3 server 5)     (enc response Ns (privk S)) (0 1))   (traces     ((send (cat C S request))
tst/kerberos.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol kerberos basic@@ -176,18 +176,16 @@   (comment "empty cohort"))  (defskeleton kerberos-  (vars (t t-prime l t-0 l-0 l-1 text)-    (a b ks a-0 b-0 ks-0 b-1 ks-1 name) (k skey))+  (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey))   (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))   (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k))-  (defstrand resp 2 (t t-0) (t-prime t-prime) (l l-0) (a a-0) (b b-0)+  (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0)     (ks ks-0) (k k))-  (defstrand init 3 (t t-0) (l l-1) (a a-0) (b b-1) (ks ks-1) (k k))-  (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0)))+  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig k)-  (operation encryption-test (added-strand init 3) (enc a-0 t-0 k)+  (operation encryption-test (displaced 3 0 init 3) (enc a-0 t-0 k)     (2 0))   (traces     ((send (cat a b))@@ -196,29 +194,26 @@       (recv (enc t-prime k)))     ((recv (cat b a))       (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))))-    ((recv (cat (enc a-0 t-0 k) (enc t-0 l-0 k a-0 (ltk b-0 ks-0))))-      (send (enc t-prime k)))-    ((send (cat a-0 b-1))-      (recv-        (cat (enc t-0 l-1 k b-1 (ltk a-0 ks-1))-          (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))-      (send (cat (enc a-0 t-0 k) (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))))+    ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0))))+      (send (enc t-prime k))))   (label 7)   (parent 3)-  (unrealized (3 1))-  (comment "2 in cohort - 2 not yet seen"))+  (unrealized (2 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton kerberos-  (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey))+  (vars (t t-prime l t-0 l-0 l-1 text)+    (a b ks a-0 b-0 ks-0 b-1 ks-1 name) (k skey))   (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))   (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k))-  (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0)+  (defstrand resp 2 (t t-0) (t-prime t-prime) (l l-0) (a a-0) (b b-0)     (ks ks-0) (k k))-  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))+  (defstrand init 3 (t t-0) (l l-1) (a a-0) (b b-1) (ks ks-1) (k k))+  (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig k)-  (operation encryption-test (displaced 3 0 init 3) (enc a-0 t-0 k)+  (operation encryption-test (added-strand init 3) (enc a-0 t-0 k)     (2 0))   (traces     ((send (cat a b))@@ -227,12 +222,17 @@       (recv (enc t-prime k)))     ((recv (cat b a))       (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))))-    ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0))))-      (send (enc t-prime k))))+    ((recv (cat (enc a-0 t-0 k) (enc t-0 l-0 k a-0 (ltk b-0 ks-0))))+      (send (enc t-prime k)))+    ((send (cat a-0 b-1))+      (recv+        (cat (enc t-0 l-1 k b-1 (ltk a-0 ks-1))+          (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))+      (send (cat (enc a-0 t-0 k) (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))))   (label 8)   (parent 3)-  (unrealized (2 0))-  (comment "1 in cohort - 1 not yet seen"))+  (unrealized (3 1))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton kerberos   (vars (t t-prime l t-0 l-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))@@ -261,18 +261,16 @@   (comment "empty cohort"))  (defskeleton kerberos-  (vars (t t-prime l t-0 l-0 l-1 text)-    (a b ks a-0 b-0 ks-0 b-1 ks-1 name) (k skey))+  (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey))   (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))   (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k))-  (defstrand resp 2 (t t-0) (t-prime t-prime) (l l-0) (a a-0) (b b-0)+  (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0)     (ks ks-0) (k k))-  (defstrand init 3 (t t-0) (l l-1) (a a-0) (b b-1) (ks ks-1) (k k))-  (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0)))+  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig k)-  (operation encryption-test (added-strand init 3) (enc a-0 t-0 k)+  (operation encryption-test (displaced 3 0 init 3) (enc a-0 t-0 k)     (2 0))   (traces     ((send (cat a b))@@ -281,29 +279,26 @@       (recv (enc t-prime k)))     ((recv (cat a b))       (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))))-    ((recv (cat (enc a-0 t-0 k) (enc t-0 l-0 k a-0 (ltk b-0 ks-0))))-      (send (enc t-prime k)))-    ((send (cat a-0 b-1))-      (recv-        (cat (enc t-0 l-1 k b-1 (ltk a-0 ks-1))-          (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))-      (send (cat (enc a-0 t-0 k) (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))))+    ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0))))+      (send (enc t-prime k))))   (label 10)   (parent 5)-  (unrealized (3 1))-  (comment "2 in cohort - 2 not yet seen"))+  (unrealized (2 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton kerberos-  (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey))+  (vars (t t-prime l t-0 l-0 l-1 text)+    (a b ks a-0 b-0 ks-0 b-1 ks-1 name) (k skey))   (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))   (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k))-  (defstrand resp 2 (t t) (t-prime t-prime) (l l-0) (a a) (b b-0)+  (defstrand resp 2 (t t-0) (t-prime t-prime) (l l-0) (a a-0) (b b-0)     (ks ks-0) (k k))-  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))+  (defstrand init 3 (t t-0) (l l-1) (a a-0) (b b-1) (ks ks-1) (k k))+  (precedes ((1 1) (0 1)) ((1 1) (3 1)) ((2 1) (0 3)) ((3 2) (2 0)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig k)-  (operation encryption-test (displaced 3 0 init 3) (enc a-0 t-0 k)+  (operation encryption-test (added-strand init 3) (enc a-0 t-0 k)     (2 0))   (traces     ((send (cat a b))@@ -312,12 +307,17 @@       (recv (enc t-prime k)))     ((recv (cat a b))       (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))))-    ((recv (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0))))-      (send (enc t-prime k))))+    ((recv (cat (enc a-0 t-0 k) (enc t-0 l-0 k a-0 (ltk b-0 ks-0))))+      (send (enc t-prime k)))+    ((send (cat a-0 b-1))+      (recv+        (cat (enc t-0 l-1 k b-1 (ltk a-0 ks-1))+          (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))+      (send (cat (enc a-0 t-0 k) (enc t-0 l-1 k a-0 (ltk b-1 ks-1))))))   (label 11)   (parent 5)-  (unrealized (2 0))-  (comment "1 in cohort - 1 not yet seen"))+  (unrealized (3 1))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton kerberos   (vars (t t-prime l t-0 l-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))@@ -346,6 +346,34 @@   (comment "empty cohort"))  (defskeleton kerberos+  (vars (t t-prime l text) (a b ks name) (k skey))+  (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)+    (k k))+  (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k))+  (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig k)+  (operation nonce-test (contracted (b-0 b) (ks-0 ks) (l-0 l)) k (2 0)+    (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))+  (traces+    ((send (cat a b))+      (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))+      (send (cat (enc a t k) (enc t l k a (ltk b ks))))+      (recv (enc t-prime k)))+    ((recv (cat b a))+      (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))))+    ((recv (cat (enc a t k) (enc t l k a (ltk b ks))))+      (send (enc t-prime k))))+  (label 13)+  (parent 7)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))+  (origs (k (1 1))))++(defskeleton kerberos   (vars (t t-prime l l-0 text) (a b ks b-0 ks-0 name) (k skey))   (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))@@ -371,8 +399,8 @@     ((send (cat b a))       (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))       (send (cat (enc b t k) (enc t l k b (ltk a ks))))))-  (label 13)-  (parent 7)+  (label 14)+  (parent 8)   (unrealized (2 0))   (comment "1 in cohort - 1 not yet seen")) @@ -402,8 +430,8 @@     ((send (cat a b))       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))))-  (label 14)-  (parent 7)+  (label 15)+  (parent 8)   (unrealized (2 0))   (comment "1 in cohort - 1 not yet seen")) @@ -411,7 +439,7 @@   (vars (t t-prime l text) (a b ks name) (k skey))   (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))-  (defstrand keyserver 2 (t t) (l l) (a b) (b a) (ks ks) (k k))+  (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k))   (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)     (k k))   (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))@@ -424,12 +452,12 @@       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))       (recv (enc t-prime k)))-    ((recv (cat b a))-      (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))))+    ((recv (cat a b))+      (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))))     ((recv (cat (enc a t k) (enc t l k a (ltk b ks))))       (send (enc t-prime k))))-  (label 15)-  (parent 8)+  (label 16)+  (parent 10)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))@@ -461,8 +489,8 @@     ((send (cat b a))       (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))       (send (cat (enc b t k) (enc t l k b (ltk a ks))))))-  (label 16)-  (parent 10)+  (label 17)+  (parent 11)   (unrealized (2 0))   (comment "1 in cohort - 1 not yet seen")) @@ -492,38 +520,10 @@     ((send (cat a b))       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))))-  (label 17)-  (parent 10)-  (unrealized (2 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton kerberos-  (vars (t t-prime l text) (a b ks name) (k skey))-  (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)-    (k k))-  (defstrand keyserver 2 (t t) (l l) (a a) (b b) (ks ks) (k k))-  (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig k)-  (operation nonce-test (contracted (b-0 b) (ks-0 ks) (l-0 l)) k (2 0)-    (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))-  (traces-    ((send (cat a b))-      (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))-      (send (cat (enc a t k) (enc t l k a (ltk b ks))))-      (recv (enc t-prime k)))-    ((recv (cat a b))-      (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))))-    ((recv (cat (enc a t k) (enc t l k a (ltk b ks))))-      (send (enc t-prime k))))   (label 18)   (parent 11)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))-  (origs (k (1 1))))+  (unrealized (2 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton kerberos   (vars (t t-prime l text) (a b ks name) (k skey))@@ -551,12 +551,11 @@       (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))       (send (cat (enc b t k) (enc t l k b (ltk a ks))))))   (label 19)-  (parent 13)+  (parent 14)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))-  (origs (k (1 1)))-  (comment "1 in cohort - 1 not yet seen"))+  (origs (k (1 1))))  (defskeleton kerberos   (vars (t t-prime l text) (a b ks name) (k skey))@@ -584,13 +583,11 @@       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))))   (label 20)-  (parent 14)-  (seen 15)+  (parent 15)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))-  (origs (k (1 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 1))))  (defskeleton kerberos   (vars (t t-prime l text) (a b ks name) (k skey))@@ -618,13 +615,11 @@       (recv (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))       (send (cat (enc b t k) (enc t l k b (ltk a ks))))))   (label 21)-  (parent 16)-  (seen 23)+  (parent 17)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))-  (origs (k (1 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 1))))  (defskeleton kerberos   (vars (t t-prime l text) (a b ks name) (k skey))@@ -652,39 +647,11 @@       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))))   (label 22)-  (parent 17)-  (seen 18)+  (parent 18)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))-  (origs (k (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton kerberos-  (vars (t t-prime l text) (a ks name) (k skey))-  (defstrand init 4 (t t) (t-prime t-prime) (l l) (a a) (b a) (ks ks)-    (k k))-  (defstrand keyserver 2 (t t) (l l) (a a) (b a) (ks ks) (k k))-  (defstrand resp 2 (t t) (t-prime t-prime) (l l) (a a) (b a) (ks ks)-    (k k))-  (precedes ((0 2) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))-  (non-orig (ltk a ks))-  (uniq-orig k)-  (operation collapsed 3 0)-  (traces-    ((send (cat a a))-      (recv (cat (enc t l k a (ltk a ks)) (enc t l k a (ltk a ks))))-      (send (cat (enc a t k) (enc t l k a (ltk a ks))))-      (recv (enc t-prime k)))-    ((recv (cat a a))-      (send (cat (enc t l k a (ltk a ks)) (enc t l k a (ltk a ks)))))-    ((recv (cat (enc a t k) (enc t l k a (ltk a ks))))-      (send (enc t-prime k))))-  (label 23)-  (parent 19)-  (seen 18)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 1))))  (comment "Nothing left to do") @@ -713,7 +680,7 @@   (traces     ((recv (cat (enc a t k) (enc t l k a (ltk b ks))))       (send (enc t-prime k))))-  (label 24)+  (label 23)   (unrealized (0 0))   (origs)   (comment "2 in cohort - 2 not yet seen"))@@ -733,8 +700,8 @@       (send (enc t-prime k)))     ((recv (cat a b))       (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))))-  (label 25)-  (parent 24)+  (label 24)+  (parent 23)   (unrealized (0 0))   (comment "2 in cohort - 2 not yet seen")) @@ -753,8 +720,8 @@       (send (enc t-prime k)))     ((recv (cat b a))       (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks))))))-  (label 26)-  (parent 24)+  (label 25)+  (parent 23)   (unrealized (0 0))   (comment "2 in cohort - 2 not yet seen")) @@ -778,8 +745,8 @@         (cat (enc t l-0 k b-0 (ltk a ks-0))           (enc t l-0 k a (ltk b-0 ks-0))))       (send (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0))))))-  (label 27)-  (parent 25)+  (label 26)+  (parent 24)   (unrealized (2 1))   (comment "1 in cohort - 1 not yet seen")) @@ -799,8 +766,8 @@     ((recv (cat a b))       (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks)))))     ((recv k) (send k)))-  (label 28)-  (parent 25)+  (label 27)+  (parent 24)   (unrealized (2 0))   (comment "empty cohort")) @@ -824,8 +791,8 @@         (cat (enc t l-0 k b-0 (ltk a ks-0))           (enc t l-0 k a (ltk b-0 ks-0))))       (send (cat (enc a t k) (enc t l-0 k a (ltk b-0 ks-0))))))-  (label 29)-  (parent 26)+  (label 28)+  (parent 25)   (unrealized (2 1))   (comment "1 in cohort - 1 not yet seen")) @@ -845,8 +812,8 @@     ((recv (cat b a))       (send (cat (enc t l k a (ltk b ks)) (enc t l k b (ltk a ks)))))     ((recv k) (send k)))-  (label 30)-  (parent 26)+  (label 29)+  (parent 25)   (unrealized (2 0))   (comment "empty cohort")) @@ -869,8 +836,8 @@     ((send (cat a b))       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))))-  (label 31)-  (parent 27)+  (label 30)+  (parent 26)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))@@ -895,8 +862,8 @@     ((send (cat a b))       (recv (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))       (send (cat (enc a t k) (enc t l k a (ltk b ks))))))-  (label 32)-  (parent 29)+  (label 31)+  (parent 28)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (t-prime t-prime) (l l) (k k))))@@ -929,7 +896,7 @@   (traces     ((recv (cat a b))       (send (cat (enc t l k b (ltk a ks)) (enc t l k a (ltk b ks))))))-  (label 33)+  (label 32)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (t t) (l l) (k k))))
tst/mass.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol mass basic@@ -64,44 +64,42 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass-  (vars (n2 n1 n1-0 text) (a b name))+  (vars (n2 n1 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))-  (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))-  (defstrand init 3 (n1 n1-0) (a a) (b b))-  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 2) (1 2)))+  (defstrand resp 5 (n1 n1) (n2 n2) (a a) (b b))+  (precedes ((0 2) (1 2)) ((0 3) (1 3)) ((1 4) (0 4)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3) (enc n1-0 (ltk a b))+  (operation encryption-test (displaced 2 0 init 3) (enc n1-0 (ltk a b))     (1 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)       (recv (enc n2 (ltk a b))))-    ((recv a) (send n1-0) (recv (enc n1-0 (ltk a b))) (recv n2)-      (send (enc n2 (ltk a b))))-    ((send a) (recv n1-0) (send (enc n1-0 (ltk a b)))))+    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n2)+      (send (enc n2 (ltk a b)))))   (label 3)   (parent 2)-  (seen 4)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 3)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 3))))  (defskeleton mass-  (vars (n2 n1 text) (a b name))+  (vars (n2 n1 n1-0 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))-  (defstrand resp 5 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 2) (1 2)) ((0 3) (1 3)) ((1 4) (0 4)))+  (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))+  (defstrand init 3 (n1 n1-0) (a a) (b b))+  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 2) (1 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (displaced 2 0 init 3) (enc n1-0 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n1-0 (ltk a b))     (1 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)       (recv (enc n2 (ltk a b))))-    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n2)-      (send (enc n2 (ltk a b)))))+    ((recv a) (send n1-0) (recv (enc n1-0 (ltk a b))) (recv n2)+      (send (enc n2 (ltk a b))))+    ((send a) (recv n1-0) (send (enc n1-0 (ltk a b)))))   (label 4)   (parent 2)   (unrealized)@@ -132,50 +130,48 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 text) (a b name))+  (vars (n2 n1 n1-0 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))-  (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))-  (defstrand init 3 (n1 n1-1) (a a) (b b))-  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 2) (2 2)))+  (defstrand resp 5 (n1 n1) (n2 n1-0) (a a) (b b))+  (precedes ((0 2) (2 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3) (enc n1-1 (ltk a b))+  (operation encryption-test (displaced 3 0 init 3) (enc n1-1 (ltk a b))     (2 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)       (recv (enc n2 (ltk a b))))     ((recv a) (send n1-0) (recv (enc n1-0 (ltk a b))) (recv n2)       (send (enc n2 (ltk a b))))-    ((recv a) (send n1-1) (recv (enc n1-1 (ltk a b))) (recv n1-0)-      (send (enc n1-0 (ltk a b))))-    ((send a) (recv n1-1) (send (enc n1-1 (ltk a b)))))+    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-0)+      (send (enc n1-0 (ltk a b)))))   (label 6)   (parent 5)-  (seen 7)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 3)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 3))))  (defskeleton mass-  (vars (n2 n1 n1-0 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))-  (defstrand resp 5 (n1 n1) (n2 n1-0) (a a) (b b))-  (precedes ((0 2) (2 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)))+  (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))+  (defstrand init 3 (n1 n1-1) (a a) (b b))+  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 2) (2 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (displaced 3 0 init 3) (enc n1-1 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n1-1 (ltk a b))     (2 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)       (recv (enc n2 (ltk a b))))     ((recv a) (send n1-0) (recv (enc n1-0 (ltk a b))) (recv n2)       (send (enc n2 (ltk a b))))-    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-0)-      (send (enc n1-0 (ltk a b)))))+    ((recv a) (send n1-1) (recv (enc n1-1 (ltk a b))) (recv n1-0)+      (send (enc n1-0 (ltk a b))))+    ((send a) (recv n1-1) (send (enc n1-1 (ltk a b)))))   (label 7)   (parent 5)   (unrealized)@@ -209,17 +205,16 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))-  (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))-  (defstrand init 3 (n1 n1-2) (a a) (b b))-  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))-    ((4 2) (3 2)))+  (defstrand resp 5 (n1 n1) (n2 n1-1) (a a) (b b))+  (precedes ((0 2) (3 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))+    ((3 4) (2 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3) (enc n1-2 (ltk a b))+  (operation encryption-test (displaced 4 0 init 3) (enc n1-2 (ltk a b))     (3 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -228,29 +223,27 @@       (send (enc n2 (ltk a b))))     ((recv a) (send n1-1) (recv (enc n1-1 (ltk a b))) (recv n1-0)       (send (enc n1-0 (ltk a b))))-    ((recv a) (send n1-2) (recv (enc n1-2 (ltk a b))) (recv n1-1)-      (send (enc n1-1 (ltk a b))))-    ((send a) (recv n1-2) (send (enc n1-2 (ltk a b)))))+    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-1)+      (send (enc n1-1 (ltk a b)))))   (label 9)   (parent 8)-  (seen 10)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 3)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 3))))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))-  (defstrand resp 5 (n1 n1) (n2 n1-1) (a a) (b b))-  (precedes ((0 2) (3 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))-    ((3 4) (2 2)))+  (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))+  (defstrand init 3 (n1 n1-2) (a a) (b b))+  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))+    ((4 2) (3 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (displaced 4 0 init 3) (enc n1-2 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n1-2 (ltk a b))     (3 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -259,8 +252,9 @@       (send (enc n2 (ltk a b))))     ((recv a) (send n1-1) (recv (enc n1-1 (ltk a b))) (recv n1-0)       (send (enc n1-0 (ltk a b))))-    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-1)-      (send (enc n1-1 (ltk a b)))))+    ((recv a) (send n1-2) (recv (enc n1-2 (ltk a b))) (recv n1-1)+      (send (enc n1-1 (ltk a b))))+    ((send a) (recv n1-2) (send (enc n1-2 (ltk a b)))))   (label 10)   (parent 8)   (unrealized)@@ -298,18 +292,17 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))   (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))-  (defstrand resp 5 (n1 n1-3) (n2 n1-2) (a a) (b b))-  (defstrand init 3 (n1 n1-3) (a a) (b b))-  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))-    ((4 4) (3 2)) ((5 2) (4 2)))+  (defstrand resp 5 (n1 n1) (n2 n1-2) (a a) (b b))+  (precedes ((0 2) (4 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))+    ((3 4) (2 2)) ((4 4) (3 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3) (enc n1-3 (ltk a b))+  (operation encryption-test (displaced 5 0 init 3) (enc n1-3 (ltk a b))     (4 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -320,30 +313,28 @@       (send (enc n1-0 (ltk a b))))     ((recv a) (send n1-2) (recv (enc n1-2 (ltk a b))) (recv n1-1)       (send (enc n1-1 (ltk a b))))-    ((recv a) (send n1-3) (recv (enc n1-3 (ltk a b))) (recv n1-2)-      (send (enc n1-2 (ltk a b))))-    ((send a) (recv n1-3) (send (enc n1-3 (ltk a b)))))+    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-2)+      (send (enc n1-2 (ltk a b)))))   (label 12)   (parent 11)-  (seen 13)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 3)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 3))))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))   (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))-  (defstrand resp 5 (n1 n1) (n2 n1-2) (a a) (b b))-  (precedes ((0 2) (4 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))-    ((3 4) (2 2)) ((4 4) (3 2)))+  (defstrand resp 5 (n1 n1-3) (n2 n1-2) (a a) (b b))+  (defstrand init 3 (n1 n1-3) (a a) (b b))+  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))+    ((4 4) (3 2)) ((5 2) (4 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (displaced 5 0 init 3) (enc n1-3 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n1-3 (ltk a b))     (4 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -354,8 +345,9 @@       (send (enc n1-0 (ltk a b))))     ((recv a) (send n1-2) (recv (enc n1-2 (ltk a b))) (recv n1-1)       (send (enc n1-1 (ltk a b))))-    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-2)-      (send (enc n1-2 (ltk a b)))))+    ((recv a) (send n1-3) (recv (enc n1-3 (ltk a b))) (recv n1-2)+      (send (enc n1-2 (ltk a b))))+    ((send a) (recv n1-3) (send (enc n1-3 (ltk a b)))))   (label 13)   (parent 11)   (unrealized)@@ -396,19 +388,18 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 n1-4 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))   (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))   (defstrand resp 5 (n1 n1-3) (n2 n1-2) (a a) (b b))-  (defstrand resp 5 (n1 n1-4) (n2 n1-3) (a a) (b b))-  (defstrand init 3 (n1 n1-4) (a a) (b b))-  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))-    ((4 4) (3 2)) ((5 4) (4 2)) ((6 2) (5 2)))+  (defstrand resp 5 (n1 n1) (n2 n1-3) (a a) (b b))+  (precedes ((0 2) (5 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))+    ((3 4) (2 2)) ((4 4) (3 2)) ((5 4) (4 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3) (enc n1-4 (ltk a b))+  (operation encryption-test (displaced 6 0 init 3) (enc n1-4 (ltk a b))     (5 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -421,31 +412,29 @@       (send (enc n1-1 (ltk a b))))     ((recv a) (send n1-3) (recv (enc n1-3 (ltk a b))) (recv n1-2)       (send (enc n1-2 (ltk a b))))-    ((recv a) (send n1-4) (recv (enc n1-4 (ltk a b))) (recv n1-3)-      (send (enc n1-3 (ltk a b))))-    ((send a) (recv n1-4) (send (enc n1-4 (ltk a b)))))+    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-3)+      (send (enc n1-3 (ltk a b)))))   (label 15)   (parent 14)-  (seen 16)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 3)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 3))))  (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 n1-4 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))   (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))   (defstrand resp 5 (n1 n1-3) (n2 n1-2) (a a) (b b))-  (defstrand resp 5 (n1 n1) (n2 n1-3) (a a) (b b))-  (precedes ((0 2) (5 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))-    ((3 4) (2 2)) ((4 4) (3 2)) ((5 4) (4 2)))+  (defstrand resp 5 (n1 n1-4) (n2 n1-3) (a a) (b b))+  (defstrand init 3 (n1 n1-4) (a a) (b b))+  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))+    ((4 4) (3 2)) ((5 4) (4 2)) ((6 2) (5 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (displaced 6 0 init 3) (enc n1-4 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n1-4 (ltk a b))     (5 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -458,8 +447,9 @@       (send (enc n1-1 (ltk a b))))     ((recv a) (send n1-3) (recv (enc n1-3 (ltk a b))) (recv n1-2)       (send (enc n1-2 (ltk a b))))-    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-3)-      (send (enc n1-3 (ltk a b)))))+    ((recv a) (send n1-4) (recv (enc n1-4 (ltk a b))) (recv n1-3)+      (send (enc n1-3 (ltk a b))))+    ((send a) (recv n1-4) (send (enc n1-4 (ltk a b)))))   (label 16)   (parent 14)   (unrealized)@@ -502,23 +492,20 @@   (unrealized (6 2))   (comment "3 in cohort - 3 not yet seen")) -(comment "Strand bound exceeded--aborting run")- (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 n1-4 n1-5 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 n1-4 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))   (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))   (defstrand resp 5 (n1 n1-3) (n2 n1-2) (a a) (b b))   (defstrand resp 5 (n1 n1-4) (n2 n1-3) (a a) (b b))-  (defstrand resp 5 (n1 n1-5) (n2 n1-4) (a a) (b b))-  (defstrand init 3 (n1 n1-5) (a a) (b b))-  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))-    ((4 4) (3 2)) ((5 4) (4 2)) ((6 4) (5 2)) ((7 2) (6 2)))+  (defstrand resp 5 (n1 n1) (n2 n1-4) (a a) (b b))+  (precedes ((0 2) (6 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))+    ((3 4) (2 2)) ((4 4) (3 2)) ((5 4) (4 2)) ((6 4) (5 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3) (enc n1-5 (ltk a b))+  (operation encryption-test (displaced 7 0 init 3) (enc n1-5 (ltk a b))     (6 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -533,28 +520,32 @@       (send (enc n1-2 (ltk a b))))     ((recv a) (send n1-4) (recv (enc n1-4 (ltk a b))) (recv n1-3)       (send (enc n1-3 (ltk a b))))-    ((recv a) (send n1-5) (recv (enc n1-5 (ltk a b))) (recv n1-4)-      (send (enc n1-4 (ltk a b))))-    ((send a) (recv n1-5) (send (enc n1-5 (ltk a b)))))+    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-4)+      (send (enc n1-4 (ltk a b)))))   (label 18)   (parent 17)   (unrealized)-  (comment "aborted"))+  (shape)+  (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+  (origs (n2 (0 3)))) +(comment "Strand bound exceeded--aborting run")+ (defskeleton mass-  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 n1-4 text) (a b name))+  (vars (n2 n1 n1-0 n1-1 n1-2 n1-3 n1-4 n1-5 text) (a b name))   (defstrand init 5 (n1 n1) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-0) (n2 n2) (a a) (b b))   (defstrand resp 5 (n1 n1-1) (n2 n1-0) (a a) (b b))   (defstrand resp 5 (n1 n1-2) (n2 n1-1) (a a) (b b))   (defstrand resp 5 (n1 n1-3) (n2 n1-2) (a a) (b b))   (defstrand resp 5 (n1 n1-4) (n2 n1-3) (a a) (b b))-  (defstrand resp 5 (n1 n1) (n2 n1-4) (a a) (b b))-  (precedes ((0 2) (6 2)) ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2))-    ((3 4) (2 2)) ((4 4) (3 2)) ((5 4) (4 2)) ((6 4) (5 2)))+  (defstrand resp 5 (n1 n1-5) (n2 n1-4) (a a) (b b))+  (defstrand init 3 (n1 n1-5) (a a) (b b))+  (precedes ((0 3) (1 3)) ((1 4) (0 4)) ((2 4) (1 2)) ((3 4) (2 2))+    ((4 4) (3 2)) ((5 4) (4 2)) ((6 4) (5 2)) ((7 2) (6 2)))   (non-orig (ltk a b))   (uniq-orig n2)-  (operation encryption-test (displaced 7 0 init 3) (enc n1-5 (ltk a b))+  (operation encryption-test (added-strand init 3) (enc n1-5 (ltk a b))     (6 2))   (traces     ((send a) (recv n1) (send (enc n1 (ltk a b))) (send n2)@@ -569,8 +560,9 @@       (send (enc n1-2 (ltk a b))))     ((recv a) (send n1-4) (recv (enc n1-4 (ltk a b))) (recv n1-3)       (send (enc n1-3 (ltk a b))))-    ((recv a) (send n1) (recv (enc n1 (ltk a b))) (recv n1-4)-      (send (enc n1-4 (ltk a b)))))+    ((recv a) (send n1-5) (recv (enc n1-5 (ltk a b))) (recv n1-4)+      (send (enc n1-4 (ltk a b))))+    ((send a) (recv n1-5) (send (enc n1-5 (ltk a b)))))   (label 19)   (parent 17)   (unrealized)
tst/mass2.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol mass2 basic@@ -86,44 +86,42 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n1-0 text) (a b name))+  (vars (n1 n2 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))-  (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))-  (defstrand resp 2 (n1 n1-0) (n2 n2-0) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 1) (1 1)))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand resp 2) (enc n2-0 (ltk a b))+  (operation encryption-test (displaced 2 0 resp 2) (enc n2-0 (ltk a b))     (1 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))       (recv (enc n1 (ltk a b))))-    ((send (cat a n2-0)) (recv (cat n1 (enc n2-0 (ltk a b))))-      (send (enc n1 (ltk a b))))-    ((recv (cat a n2-0)) (send (cat n1-0 (enc n2-0 (ltk a b))))))+    ((send (cat a n2)) (recv (cat n1 (enc n2 (ltk a b))))+      (send (enc n1 (ltk a b)))))   (label 4)   (parent 1)-  (seen 5)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))-  (origs (n1 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n1 (0 1))))  (defskeleton mass2-  (vars (n1 n2 text) (a b name))+  (vars (n1 n2 n2-0 n1-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)))+  (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))+  (defstrand resp 2 (n1 n1-0) (n2 n2-0) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 1) (1 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 2 0 resp 2) (enc n2-0 (ltk a b))+  (operation encryption-test (added-strand resp 2) (enc n2-0 (ltk a b))     (1 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))       (recv (enc n1 (ltk a b))))-    ((send (cat a n2)) (recv (cat n1 (enc n2 (ltk a b))))-      (send (enc n1 (ltk a b)))))+    ((send (cat a n2-0)) (recv (cat n1 (enc n2-0 (ltk a b))))+      (send (enc n1 (ltk a b))))+    ((recv (cat a n2-0)) (send (cat n1-0 (enc n2-0 (ltk a b))))))   (label 5)   (parent 1)   (unrealized)@@ -157,50 +155,48 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n1-0 text) (a b name))+  (vars (n1 n2 n2-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))-  (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))-  (defstrand resp 2 (n1 n1-0) (n2 n2-1) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 1) (2 1)))+  (defstrand init 3 (n1 n2-0) (n2 n2) (a a) (b b))+  (precedes ((0 1) (2 1)) ((1 2) (0 2)) ((2 2) (1 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand resp 2) (enc n2-1 (ltk a b))+  (operation encryption-test (displaced 3 0 resp 2) (enc n2-1 (ltk a b))     (2 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))       (recv (enc n1 (ltk a b))))     ((send (cat a n2-0)) (recv (cat n1 (enc n2-0 (ltk a b))))       (send (enc n1 (ltk a b))))-    ((send (cat a n2-1)) (recv (cat n2-0 (enc n2-1 (ltk a b))))-      (send (enc n2-0 (ltk a b))))-    ((recv (cat a n2-1)) (send (cat n1-0 (enc n2-1 (ltk a b))))))+    ((send (cat a n2)) (recv (cat n2-0 (enc n2 (ltk a b))))+      (send (enc n2-0 (ltk a b)))))   (label 7)   (parent 3)-  (seen 8)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))-  (origs (n1 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n1 (0 1))))  (defskeleton mass2-  (vars (n1 n2 n2-0 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n1-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))-  (defstrand init 3 (n1 n2-0) (n2 n2) (a a) (b b))-  (precedes ((0 1) (2 1)) ((1 2) (0 2)) ((2 2) (1 1)))+  (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))+  (defstrand resp 2 (n1 n1-0) (n2 n2-1) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 1) (2 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 3 0 resp 2) (enc n2-1 (ltk a b))+  (operation encryption-test (added-strand resp 2) (enc n2-1 (ltk a b))     (2 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))       (recv (enc n1 (ltk a b))))     ((send (cat a n2-0)) (recv (cat n1 (enc n2-0 (ltk a b))))       (send (enc n1 (ltk a b))))-    ((send (cat a n2)) (recv (cat n2-0 (enc n2 (ltk a b))))-      (send (enc n2-0 (ltk a b)))))+    ((send (cat a n2-1)) (recv (cat n2-0 (enc n2-1 (ltk a b))))+      (send (enc n2-0 (ltk a b))))+    ((recv (cat a n2-1)) (send (cat n1-0 (enc n2-1 (ltk a b))))))   (label 8)   (parent 3)   (unrealized)@@ -238,17 +234,15 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n1-0 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))-  (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))-  (defstrand resp 2 (n1 n1-0) (n2 n2-2) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 1) (3 1)))+  (defstrand init 3 (n1 n2-1) (n2 n2) (a a) (b b))+  (precedes ((0 1) (3 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand resp 2) (enc n2-2 (ltk a b))+  (operation encryption-test (displaced 4 0 resp 2) (enc n2-2 (ltk a b))     (3 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -257,28 +251,27 @@       (send (enc n1 (ltk a b))))     ((send (cat a n2-1)) (recv (cat n2-0 (enc n2-1 (ltk a b))))       (send (enc n2-0 (ltk a b))))-    ((send (cat a n2-2)) (recv (cat n2-1 (enc n2-2 (ltk a b))))-      (send (enc n2-1 (ltk a b))))-    ((recv (cat a n2-2)) (send (cat n1-0 (enc n2-2 (ltk a b))))))+    ((send (cat a n2)) (recv (cat n2-1 (enc n2 (ltk a b))))+      (send (enc n2-1 (ltk a b)))))   (label 10)   (parent 6)-  (seen 11)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))-  (origs (n1 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n1 (0 1))))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n1-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))-  (defstrand init 3 (n1 n2-1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (3 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1)))+  (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))+  (defstrand resp 2 (n1 n1-0) (n2 n2-2) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 1) (3 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 4 0 resp 2) (enc n2-2 (ltk a b))+  (operation encryption-test (added-strand resp 2) (enc n2-2 (ltk a b))     (3 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -287,8 +280,9 @@       (send (enc n1 (ltk a b))))     ((send (cat a n2-1)) (recv (cat n2-0 (enc n2-1 (ltk a b))))       (send (enc n2-0 (ltk a b))))-    ((send (cat a n2)) (recv (cat n2-1 (enc n2 (ltk a b))))-      (send (enc n2-1 (ltk a b)))))+    ((send (cat a n2-2)) (recv (cat n2-1 (enc n2-2 (ltk a b))))+      (send (enc n2-1 (ltk a b))))+    ((recv (cat a n2-2)) (send (cat n1-0 (enc n2-2 (ltk a b))))))   (label 11)   (parent 6)   (unrealized)@@ -329,18 +323,17 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n1-0 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))-  (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))-  (defstrand resp 2 (n1 n1-0) (n2 n2-3) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 1) (4 1)))+  (defstrand init 3 (n1 n2-2) (n2 n2) (a a) (b b))+  (precedes ((0 1) (4 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand resp 2) (enc n2-3 (ltk a b))+  (operation encryption-test (displaced 5 0 resp 2) (enc n2-3 (ltk a b))     (4 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -351,30 +344,28 @@       (send (enc n2-0 (ltk a b))))     ((send (cat a n2-2)) (recv (cat n2-1 (enc n2-2 (ltk a b))))       (send (enc n2-1 (ltk a b))))-    ((send (cat a n2-3)) (recv (cat n2-2 (enc n2-3 (ltk a b))))-      (send (enc n2-2 (ltk a b))))-    ((recv (cat a n2-3)) (send (cat n1-0 (enc n2-3 (ltk a b))))))+    ((send (cat a n2)) (recv (cat n2-2 (enc n2 (ltk a b))))+      (send (enc n2-2 (ltk a b)))))   (label 13)   (parent 9)-  (seen 14)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))-  (origs (n1 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n1 (0 1))))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n1-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))-  (defstrand init 3 (n1 n2-2) (n2 n2) (a a) (b b))-  (precedes ((0 1) (4 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)))+  (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))+  (defstrand resp 2 (n1 n1-0) (n2 n2-3) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 1) (4 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 5 0 resp 2) (enc n2-3 (ltk a b))+  (operation encryption-test (added-strand resp 2) (enc n2-3 (ltk a b))     (4 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -385,8 +376,9 @@       (send (enc n2-0 (ltk a b))))     ((send (cat a n2-2)) (recv (cat n2-1 (enc n2-2 (ltk a b))))       (send (enc n2-1 (ltk a b))))-    ((send (cat a n2)) (recv (cat n2-2 (enc n2 (ltk a b))))-      (send (enc n2-2 (ltk a b)))))+    ((send (cat a n2-3)) (recv (cat n2-2 (enc n2-3 (ltk a b))))+      (send (enc n2-2 (ltk a b))))+    ((recv (cat a n2-3)) (send (cat n1-0 (enc n2-3 (ltk a b))))))   (label 14)   (parent 9)   (unrealized)@@ -430,19 +422,18 @@   (comment "3 in cohort - 3 not yet seen"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 n1-0 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))   (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))-  (defstrand init 3 (n1 n2-3) (n2 n2-4) (a a) (b b))-  (defstrand resp 2 (n1 n1-0) (n2 n2-4) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 2) (4 1)) ((6 1) (5 1)))+  (defstrand init 3 (n1 n2-3) (n2 n2) (a a) (b b))+  (precedes ((0 1) (5 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 2) (4 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand resp 2) (enc n2-4 (ltk a b))+  (operation encryption-test (displaced 6 0 resp 2) (enc n2-4 (ltk a b))     (5 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -455,31 +446,29 @@       (send (enc n2-1 (ltk a b))))     ((send (cat a n2-3)) (recv (cat n2-2 (enc n2-3 (ltk a b))))       (send (enc n2-2 (ltk a b))))-    ((send (cat a n2-4)) (recv (cat n2-3 (enc n2-4 (ltk a b))))-      (send (enc n2-3 (ltk a b))))-    ((recv (cat a n2-4)) (send (cat n1-0 (enc n2-4 (ltk a b))))))+    ((send (cat a n2)) (recv (cat n2-3 (enc n2 (ltk a b))))+      (send (enc n2-3 (ltk a b)))))   (label 16)   (parent 12)-  (seen 17)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n1 n1) (n2 n2))))-  (origs (n1 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n1 (0 1))))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 n1-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))   (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))-  (defstrand init 3 (n1 n2-3) (n2 n2) (a a) (b b))-  (precedes ((0 1) (5 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 2) (4 1)))+  (defstrand init 3 (n1 n2-3) (n2 n2-4) (a a) (b b))+  (defstrand resp 2 (n1 n1-0) (n2 n2-4) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 2) (4 1)) ((6 1) (5 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 6 0 resp 2) (enc n2-4 (ltk a b))+  (operation encryption-test (added-strand resp 2) (enc n2-4 (ltk a b))     (5 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -492,8 +481,9 @@       (send (enc n2-1 (ltk a b))))     ((send (cat a n2-3)) (recv (cat n2-2 (enc n2-3 (ltk a b))))       (send (enc n2-2 (ltk a b))))-    ((send (cat a n2)) (recv (cat n2-3 (enc n2 (ltk a b))))-      (send (enc n2-3 (ltk a b)))))+    ((send (cat a n2-4)) (recv (cat n2-3 (enc n2-4 (ltk a b))))+      (send (enc n2-3 (ltk a b))))+    ((recv (cat a n2-4)) (send (cat n1-0 (enc n2-4 (ltk a b))))))   (label 17)   (parent 12)   (unrealized)@@ -542,20 +532,19 @@   (comment "aborted"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 n2-5 n1-0 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))   (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))   (defstrand init 3 (n1 n2-3) (n2 n2-4) (a a) (b b))-  (defstrand init 3 (n1 n2-4) (n2 n2-5) (a a) (b b))-  (defstrand resp 2 (n1 n1-0) (n2 n2-5) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)) ((7 1) (6 1)))+  (defstrand init 3 (n1 n2-4) (n2 n2) (a a) (b b))+  (precedes ((0 1) (6 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (added-strand resp 2) (enc n2-5 (ltk a b))+  (operation encryption-test (displaced 7 0 resp 2) (enc n2-5 (ltk a b))     (6 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -570,28 +559,28 @@       (send (enc n2-2 (ltk a b))))     ((send (cat a n2-4)) (recv (cat n2-3 (enc n2-4 (ltk a b))))       (send (enc n2-3 (ltk a b))))-    ((send (cat a n2-5)) (recv (cat n2-4 (enc n2-5 (ltk a b))))-      (send (enc n2-4 (ltk a b))))-    ((recv (cat a n2-5)) (send (cat n1-0 (enc n2-5 (ltk a b))))))+    ((send (cat a n2)) (recv (cat n2-4 (enc n2 (ltk a b))))+      (send (enc n2-4 (ltk a b)))))   (label 19)   (parent 15)   (unrealized)   (comment "aborted"))  (defskeleton mass2-  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 text) (a b name))+  (vars (n1 n2 n2-0 n2-1 n2-2 n2-3 n2-4 n2-5 n1-0 text) (a b name))   (defstrand resp 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1) (n2 n2-0) (a a) (b b))   (defstrand init 3 (n1 n2-0) (n2 n2-1) (a a) (b b))   (defstrand init 3 (n1 n2-1) (n2 n2-2) (a a) (b b))   (defstrand init 3 (n1 n2-2) (n2 n2-3) (a a) (b b))   (defstrand init 3 (n1 n2-3) (n2 n2-4) (a a) (b b))-  (defstrand init 3 (n1 n2-4) (n2 n2) (a a) (b b))-  (precedes ((0 1) (6 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))-    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)))+  (defstrand init 3 (n1 n2-4) (n2 n2-5) (a a) (b b))+  (defstrand resp 2 (n1 n1-0) (n2 n2-5) (a a) (b b))+  (precedes ((0 1) (1 1)) ((1 2) (0 2)) ((2 2) (1 1)) ((3 2) (2 1))+    ((4 2) (3 1)) ((5 2) (4 1)) ((6 2) (5 1)) ((7 1) (6 1)))   (non-orig (ltk a b))   (uniq-orig n1)-  (operation encryption-test (displaced 7 0 resp 2) (enc n2-5 (ltk a b))+  (operation encryption-test (added-strand resp 2) (enc n2-5 (ltk a b))     (6 1))   (traces     ((recv (cat a n2)) (send (cat n1 (enc n2 (ltk a b))))@@ -606,8 +595,9 @@       (send (enc n2-2 (ltk a b))))     ((send (cat a n2-4)) (recv (cat n2-3 (enc n2-4 (ltk a b))))       (send (enc n2-3 (ltk a b))))-    ((send (cat a n2)) (recv (cat n2-4 (enc n2 (ltk a b))))-      (send (enc n2-4 (ltk a b)))))+    ((send (cat a n2-5)) (recv (cat n2-4 (enc n2-5 (ltk a b))))+      (send (enc n2-4 (ltk a b))))+    ((recv (cat a n2-5)) (send (cat n1-0 (enc n2-5 (ltk a b))))))   (label 20)   (parent 15)   (unrealized)
tst/missing_contraction.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol missing-contraction basic@@ -19,10 +19,9 @@   (traces ((send (enc a m (pubk a))) (send (enc a n (pubk b))))     ((recv (enc a m (pubk c)))))   (label 0)-  (seen 2)   (unrealized (1 0))   (origs (m (0 0)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton missing-contraction   (vars (m n text) (a b name))@@ -48,8 +47,8 @@   (precedes ((0 1) (1 0)))   (non-orig (privk a))   (uniq-orig n)-  (operation nonce-test (added-strand sender 2) n (1 0)-    (enc a n (pubk a)))+  (operation nonce-test (displaced 2 0 sender 2) m (1 0)+    (enc a m (pubk a)))   (traces ((send (enc a n (pubk a))) (send (enc a n (pubk b))))     ((recv (enc a n (pubk c)))))   (label 2)@@ -93,10 +92,9 @@     ((recv (enc a m (pubk c))) (send (enc a m (pubk c)))))   (label 4)   (parent 3)-  (seen 6)   (unrealized (1 0))   (origs (m (0 0)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton missing-contraction   (vars (m text) (a name))@@ -122,8 +120,8 @@   (precedes ((1 1) (0 0)))   (non-orig (privk a))   (uniq-orig m)-  (operation nonce-test (added-strand sender 2) m (1 0)-    (enc a m (pubk a)))+  (operation nonce-test (displaced 0 2 sender 2) m-0 (1 0)+    (enc a-0 m-0 (pubk a-0)))   (traces ((recv (enc a m (pubk c))) (send (enc a m (pubk c))))     ((send (enc a m (pubk a))) (send (enc a m (pubk b)))))   (label 6)@@ -153,10 +151,9 @@   (traces ((send (enc a m (pubk a))) (send (enc a n (pubk b))))     ((recv (enc a m (pubk c)))))   (label 7)-  (seen 9)   (unrealized (1 0))   (origs (m (0 0)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton missing-contraction   (vars (m n text) (a b name))@@ -182,8 +179,8 @@   (precedes ((0 1) (1 0)))   (non-orig (privk a) (privk b))   (uniq-orig n)-  (operation nonce-test (added-strand sender 2) n (1 0)-    (enc a n (pubk a)))+  (operation nonce-test (displaced 2 0 sender 2) m (1 0)+    (enc a m (pubk a)))   (traces ((send (enc a n (pubk a))) (send (enc a n (pubk b))))     ((recv (enc a n (pubk c)))))   (label 9)
tst/neuman-stubblebine-reauth.tst view
@@ -1,9836 +1,11951 @@-(comment "CPSA 2.2.8")-(comment "All input read")--(defprotocol neuman-stubblebine-reauth basic-  (defrole init-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (defrole resp-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (defrole init-reauth-    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))-    (trace (recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (defrole resp-reauth-    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))-    (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))-  (defrole keyserver-    (vars (a b ks name) (ra rb text) (k skey) (tb text))-    (trace (recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    (uniq-orig k)))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))-  (label 0)-  (unrealized (0 2) (1 0))-  (origs (rb (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb-0 (ltk b ks)) (1 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0))))-  (label 1)-  (parent 0)-  (unrealized (0 2) (1 2) (2 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp 2)-    (enc a ra-0 tb-0 (ltk b ks)) (2 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))-  (label 2)-  (parent 1)-  (unrealized (0 2) (1 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 3 0 resp 2)-    (enc a ra-0 tb-0 (ltk b ks)) (2 0))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))-  (label 3)-  (parent 1)-  (unrealized (0 2) (1 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb-prime k)-    (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))-  (label 4)-  (parent 2)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 5)-  (parent 2)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 6)-  (parent 2)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (deflistener k)-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv k) (send k)))-  (label 7)-  (parent 2)-  (unrealized (0 2) (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb-prime k)-    (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb-prime k)))))-  (label 8)-  (parent 3)-  (unrealized (0 2) (3 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((3 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 9)-  (parent 3)-  (unrealized (0 2) (3 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 10)-  (parent 3)-  (unrealized (0 2) (3 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv k) (send k)))-  (label 11)-  (parent 3)-  (unrealized (0 2) (3 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))-  (label 12)-  (parent 4)-  (seen 18)-  (unrealized (0 2) (4 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 13)-  (parent 5)-  (unrealized (0 2) (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 14)-  (parent 6)-  (seen 24)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (3 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 15)-  (parent 8)-  (seen 25)-  (unrealized (0 2) (3 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((3 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))-  (label 16)-  (parent 9)-  (unrealized (0 2) (3 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 17)-  (parent 10)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb-0 (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))-  (label 18)-  (parent 12)-  (seen 36)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 19)-  (parent 13)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 20)-  (parent 13)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 21)-  (parent 13)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (label 22)-  (parent 13)-  (seen 40)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 23)-  (parent 13)-  (unrealized (0 2) (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 24)-  (parent 14)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))-    ((3 0) (0 0)) ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (3 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 25)-  (parent 15)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 26)-  (parent 16)-  (unrealized (0 2) (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 27)-  (parent 16)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 28)-  (parent 16)-  (unrealized (0 2) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (3 0))-    ((3 1) (1 0)) ((3 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 4 1 resp-reauth 2)-    (enc ra-prime-0 k) (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (label 29)-  (parent 16)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (3 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 30)-  (parent 16)-  (unrealized (0 2) (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 31)-  (parent 17)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 32)-  (parent 17)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 33)-  (parent 17)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))-    ((3 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 34)-  (parent 17)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))-  (label 35)-  (parent 17)-  (unrealized (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))-    ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 36)-  (parent 18)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))-  (label 37)-  (parent 19)-  (seen 66)-  (unrealized (0 2) (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 38)-  (parent 20)-  (unrealized (0 2) (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 39)-  (parent 21)-  (seen 72)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))-    ((4 1) (1 0)) ((4 3) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))-  (label 40)-  (parent 22)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 41)-  (parent 24)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 42)-  (parent 24)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 43)-  (parent 24)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 1) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))))-  (label 44)-  (parent 24)-  (seen 34)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))-  (label 45)-  (parent 24)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 46)-  (parent 25)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 47)-  (parent 25)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 48)-  (parent 25)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))-    ((3 0) (0 0)) ((3 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 49)-  (parent 25)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv k) (send k)))-  (label 50)-  (parent 25)-  (unrealized (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 51)-  (parent 26)-  (seen 83)-  (unrealized (0 2) (4 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 52)-  (parent 27)-  (unrealized (0 2) (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 53)-  (parent 28)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 54)-  (parent 29)-  (unrealized (4 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 55)-  (parent 29)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 56)-  (parent 29)-  (unrealized (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 57)-  (parent 29)-  (unrealized (4 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 58)-  (parent 31)-  (seen 97)-  (unrealized (4 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 59)-  (parent 32)-  (unrealized (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 60)-  (parent 33)-  (seen 34)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 61)-  (parent 36)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 62)-  (parent 36)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 63)-  (parent 36)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))-    ((3 1) (2 0)) ((4 2) (1 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))-  (label 64)-  (parent 36)-  (seen 49)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv k) (send k)))-  (label 65)-  (parent 36)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb-0 (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))-  (label 66)-  (parent 37)-  (seen 106)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 67)-  (parent 38)-  (unrealized (0 2) (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 68)-  (parent 38)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 69)-  (parent 38)-  (unrealized (0 2) (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 70)-  (parent 38)-  (seen 110)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 71)-  (parent 38)-  (unrealized (0 2) (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 72)-  (parent 39)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 73)-  (parent 40)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 74)-  (parent 40)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 75)-  (parent 40)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0))-    ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv k) (send k)))-  (label 76)-  (parent 40)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 77)-  (parent 41)-  (seen 119)-  (unrealized (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 78)-  (parent 42)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 79)-  (parent 43)-  (seen 44 60)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1)))-  (comment "2 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 80)-  (parent 46)-  (unrealized (4 1))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 81)-  (parent 47)-  (unrealized (4 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 82)-  (parent 48)-  (seen 49)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 83)-  (parent 51)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 84)-  (parent 52)-  (unrealized (0 2) (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 85)-  (parent 52)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 86)-  (parent 52)-  (unrealized (0 2) (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (3 0))-    ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-1 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 87)-  (parent 52)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 88)-  (parent 52)-  (unrealized (0 2) (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 89)-  (parent 53)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 90)-  (parent 53)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 91)-  (parent 53)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 92)-  (parent 53)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))-  (label 93)-  (parent 53)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 94)-  (parent 54)-  (seen 145)-  (unrealized (4 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 95)-  (parent 55)-  (unrealized (4 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 96)-  (parent 56)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))-    ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 97)-  (parent 58)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 98)-  (parent 59)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 99)-  (parent 59)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 100)-  (parent 59)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 2)) ((2 1) (4 0))-    ((3 1) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 101)-  (parent 59)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 102)-  (parent 59)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 103)-  (parent 61)-  (seen 153)-  (unrealized (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 104)-  (parent 62)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 105)-  (parent 63)-  (seen 64 82)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1)))-  (comment "2 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 106)-  (parent 66)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))-  (label 107)-  (parent 67)-  (seen 164)-  (unrealized (0 2) (6 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 108)-  (parent 68)-  (unrealized (0 2) (6 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test-    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)-    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 109)-  (parent 69)-  (seen 170)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 110)-  (parent 70)-  (unrealized (0 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 111)-  (parent 72)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 112)-  (parent 72)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 113)-  (parent 72)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 114)-  (parent 72)-  (seen 92)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))-  (label 115)-  (parent 72)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 116)-  (parent 73)-  (seen 178)-  (unrealized (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 117)-  (parent 74)-  (unrealized (5 2))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 118)-  (parent 75)-  (seen 96)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 119)-  (parent 77)-  (seen 97)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 120)-  (parent 78)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 121)-  (parent 78)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 122)-  (parent 78)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (5 2)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 123)-  (parent 78)-  (seen 101)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 124)-  (parent 78)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 125)-  (parent 81)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 126)-  (parent 81)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 127)-  (parent 81)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (4 2)) ((2 1) (4 0))-    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 128)-  (parent 81)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (4 1))-    (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 129)-  (parent 81)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 130)-  (parent 83)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 131)-  (parent 83)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 132)-  (parent 83)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb ra-prime rb-prime rb ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 133)-  (parent 83)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (ra-prime (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv k) (send k)))-  (label 134)-  (parent 83)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 135)-  (parent 84)-  (seen 192)-  (unrealized (0 2) (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 136)-  (parent 85)-  (unrealized (0 2) (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 137)-  (parent 86)-  (unrealized (0 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 138)-  (parent 87)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 139)-  (parent 87)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 140)-  (parent 87)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 141)-  (parent 87)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 142)-  (parent 89)-  (seen 206)-  (unrealized (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 143)-  (parent 90)-  (unrealized (5 2))-  (comment "6 in cohort - 6 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 144)-  (parent 91)-  (seen 92 96)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1)))-  (comment "2 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))-    ((3 1) (1 0)) ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (4 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 145)-  (parent 94)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (3 1))-    (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 146)-  (parent 95)-  (unrealized (5 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 147)-  (parent 95)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 148)-  (parent 95)-  (unrealized (5 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (4 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 149)-  (parent 95)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 150)-  (parent 98)-  (seen 216)-  (unrealized (5 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 151)-  (parent 99)-  (unrealized (5 2))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 152)-  (parent 100)-  (seen 101)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 153)-  (parent 103)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 154)-  (parent 104)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 155)-  (parent 104)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 156)-  (parent 104)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 157)-  (parent 104)-  (seen 128)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 158)-  (parent 104)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 159)-  (parent 106)-  (unrealized (6 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 160)-  (parent 106)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 161)-  (parent 106)-  (unrealized (6 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 162)-  (parent 106)-  (seen 133)-  (unrealized)-  (shape)-  (maps-    ((0 1)-      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)-        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))-  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv k) (send k)))-  (label 163)-  (parent 106)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb-0 (ltk a ks)) (6 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))-  (label 164)-  (parent 107)-  (seen 228)-  (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))--(comment "Strand bound exceeded--aborting run")--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))-          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))-  (label 165)-  (parent 108)-  (unrealized (0 2) (7 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))-      (recv (cat ra-prime-2 (enc ra-prime-3 k)))-      (send (enc ra-prime-2 k))))-  (label 166)-  (parent 108)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)-    (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)-    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat rb-prime-0 (enc ra-prime-2 k)))))-  (label 167)-  (parent 108)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))-    ((6 1) (1 0)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 7 1 resp-reauth 2)-    (enc ra-prime-2 k) (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k))))-  (label 168)-  (parent 108)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0-      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))-    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-2 k)-    (6 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0))-      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb-0 (ltk b ks)))-      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))) ((recv k) (send k)))-  (label 169)-  (parent 108)-  (unrealized (0 2) (7 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      rb-prime-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 170)-  (parent 109)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))-    ((5 3) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 171)-  (parent 110)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))-    ((5 3) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 172)-  (parent 110)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))-    ((5 3) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 173)-  (parent 110)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2))-    ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 174)-  (parent 110)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 175)-  (parent 111)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 176)-  (parent 112)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 177)-  (parent 113)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)-    (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))-    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 178)-  (parent 116)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0-      text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a-0 ra-1))-      (recv-        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))-  (label 179)-  (parent 117)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 180)-  (parent 117)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-0 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 181)-  (parent 117)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))-    ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-0 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 182)-  (parent 117)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 183)-  (parent 120)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      ra-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 184)-  (parent 121)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0-      rb-prime-1 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-1 (enc ra-prime-0 k)))))-  (label 185)-  (parent 122)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 186)-  (parent 125)-  (unrealized (5 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 187)-  (parent 126)-  (unrealized (5 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 188)-  (parent 127)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 189)-  (parent 130)-  (unrealized (5 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 190)-  (parent 131)-  (unrealized (5 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))-    ((4 2) (3 2)) ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 191)-  (parent 132)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 192)-  (parent 135)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))-  (label 193)-  (parent 136)-  (unrealized (0 2) (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))-      (recv (cat ra-prime-2 (enc ra-prime-3 k)))-      (send (enc ra-prime-2 k))))-  (label 194)-  (parent 136)-  (unrealized (0 2) (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (send (cat rb-prime-0 (enc ra-prime-2 k)))))-  (label 195)-  (parent 136)-  (unrealized (0 2) (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 3) (3 2))-    ((5 1) (1 0)) ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-2 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-1 (enc ra-prime k)))-      (send (enc ra-prime-1 k))))-  (label 196)-  (parent 136)-  (unrealized (0 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))-    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-2 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))) ((recv k) (send k)))-  (label 197)-  (parent 136)-  (unrealized (0 2) (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 198)-  (parent 137)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))-  (label 199)-  (parent 137)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)-    (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k))))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat rb-prime-1 (enc rb k)))))-  (label 200)-  (parent 137)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))-    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)-    (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))))-  (label 201)-  (parent 137)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))-  (label 202)-  (parent 137)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 203)-  (parent 138)-  (unrealized (5 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 204)-  (parent 139)-  (unrealized (5 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))-    ((5 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 205)-  (parent 140)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 0) (0 0)) ((5 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 206)-  (parent 142)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 207)-  (parent 143)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 208)-  (parent 143)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-1 (enc ra-prime-1 k)))))-  (label 209)-  (parent 143)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((5 1) (1 0)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))-  (label 210)-  (parent 143)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))-    ((4 1) (5 2)) ((5 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 4 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))-  (label 211)-  (parent 143)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))-    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))-    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))-    ((recv k) (send k)))-  (label 212)-  (parent 143)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 213)-  (parent 146)-  (unrealized (5 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 214)-  (parent 147)-  (unrealized (5 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))-    ((5 1) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 215)-  (parent 148)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 0) (0 0))-    ((5 2) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (5 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra))-      (recv-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 216)-  (parent 150)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a-0 ra-0))-      (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))-  (label 217)-  (parent 151)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand init-reauth 4)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))-      (recv (cat ra-prime-1 (enc ra-prime-2 k)))-      (send (enc ra-prime-1 k))))-  (label 218)-  (parent 151)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)-    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))-      (send (cat rb-prime-1 (enc ra-prime-1 k)))))-  (label 219)-  (parent 151)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (5 2)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (1 0))-    ((5 3) (4 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (displaced 6 1 resp-reauth 2)-    (enc ra-prime-1 k) (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime))-      (recv (cat ra-prime-0 (enc ra-prime k)))-      (send (enc ra-prime-0 k))))-  (label 220)-  (parent 151)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (deflistener k)-  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))-    ((5 3) (4 2)) ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-listener k) (enc ra-prime-1 k)-    (5 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))-      (send (cat rb-prime-0 (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))) ((recv k) (send k)))-  (label 221)-  (parent 151)-  (unrealized (6 0))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))-  (label 222)-  (parent 154)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 3) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k))))-  (label 223)-  (parent 155)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))-    ((6 1) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-prime))-      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (send (cat rb-prime-0 (enc ra-prime-0 k)))))-  (label 224)-  (parent 156)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)-    (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((send (cat a ra-1))-      (recv-        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 225)-  (parent 159)-  (unrealized (6 1))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 3) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))-  (label 226)-  (parent 160)-  (unrealized (6 2))-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)-    (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 2) (4 2)) ((6 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-0))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))-    ((recv (cat (enc a k tb (ltk b ks)) rb))-      (send (cat rb-prime-0 (enc rb k)))))-  (label 227)-  (parent 161)-  (unrealized)-  (comment "aborted"))--(defskeleton neuman-stubblebine-reauth-  (vars-    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1-      text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))-  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)-    (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)-    (ks ks) (k k))-  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))-    ((5 3) (4 2)) ((6 2) (5 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb ra-prime rb-prime k)-  (operation encryption-test (added-strand keyserver 2)-    (enc a k tb (ltk b ks)) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))-      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))-    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))-      (send-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          rb-0)))-    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))-      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))-    ((recv (enc a k tb (ltk b ks)))-      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))-      (recv (cat ra-prime-0 (enc ra-prime-1 k)))-      (send (enc ra-prime-0 k)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))-          ra-prime-1))-      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))-  (label 228)-  (parent 164)+(comment "CPSA 2.2.9")+(comment "All input read")++(defprotocol neuman-stubblebine-reauth basic+  (defrole init+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (defrole resp+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (defrole init-reauth+    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+    (trace (recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (defrole resp-reauth+    (vars (a b ks name) (ra-prime rb-prime text) (k skey) (tb text))+    (trace (recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+  (defrole keyserver+    (vars (a b ks name) (ra rb text) (k skey) (tb text))+    (trace (recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    (uniq-orig k)))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k))))+  (label 0)+  (unrealized (0 2) (1 0))+  (origs (rb (0 1)) (rb-prime (1 1)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand keyserver 2)+    (enc a k tb-0 (ltk b ks)) (1 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0))))+  (label 1)+  (parent 0)+  (unrealized (0 2) (1 2) (2 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 3 0 resp 2)+    (enc a ra-0 tb-0 (ltk b ks)) (2 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))+  (label 2)+  (parent 1)+  (unrealized (0 2) (1 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp 2)+    (enc a ra-0 tb-0 (ltk b ks)) (2 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks))))))+  (label 3)+  (parent 1)+  (unrealized (0 2) (1 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb-prime k)+    (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb-prime k)))))+  (label 4)+  (parent 2)+  (unrealized (0 2) (3 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((3 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 5)+  (parent 2)+  (unrealized (0 2) (3 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 6)+  (parent 2)+  (unrealized (0 2) (3 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv k) (send k)))+  (label 7)+  (parent 2)+  (unrealized (0 2) (3 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb-prime k)+    (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc rb-prime k)))))+  (label 8)+  (parent 3)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 9)+  (parent 3)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 10)+  (parent 3)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (deflistener k)+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb-prime k) (1 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv k) (send k)))+  (label 11)+  (parent 3)+  (unrealized (0 2) (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (3 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 12)+  (parent 4)+  (unrealized (0 2) (3 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((3 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 13)+  (parent 5)+  (unrealized (0 2) (3 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (3 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 14)+  (parent 6)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-1) (rb rb-prime) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 1)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+  (label 15)+  (parent 8)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k))))+  (label 16)+  (parent 9)+  (unrealized (0 2) (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (4 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 17)+  (parent 10)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 2)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 4 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (3 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 18)+  (parent 12)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 19)+  (parent 13)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 20)+  (parent 13)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((3 1) (1 0)) ((3 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 4 1 resp-reauth 2)+    (enc ra-prime-0 k) (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (label 21)+  (parent 13)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 22)+  (parent 13)+  (unrealized (0 2) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (3 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 23)+  (parent 13)+  (unrealized (0 2) (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 24)+  (parent 14)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 25)+  (parent 14)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 0)) ((2 1) (1 0))+    ((3 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 26)+  (parent 14)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 27)+  (parent 14)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+  (label 28)+  (parent 14)+  (unrealized (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-1 k tb-0 (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc rb-prime k)))))+  (label 29)+  (parent 15)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-1+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 30)+  (parent 16)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 31)+  (parent 16)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (label 32)+  (parent 16)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 33)+  (parent 16)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 34)+  (parent 16)+  (unrealized (0 2) (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 0)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 35)+  (parent 17)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 36)+  (parent 18)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 37)+  (parent 18)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 1)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 4 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 38)+  (parent 18)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 39)+  (parent 18)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv k) (send k)))+  (label 40)+  (parent 18)+  (unrealized (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 41)+  (parent 19)+  (unrealized (0 2) (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 3) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 42)+  (parent 20)+  (unrealized (0 2) (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 43)+  (parent 21)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 44)+  (parent 21)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 45)+  (parent 21)+  (unrealized (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 46)+  (parent 21)+  (unrealized (4 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 47)+  (parent 22)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 48)+  (parent 24)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 49)+  (parent 25)+  (unrealized (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 rb-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 50)+  (parent 27)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((1 1) (4 1)) ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0))+    ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 51)+  (parent 29)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 ra-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 1)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+  (label 52)+  (parent 30)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 53)+  (parent 31)+  (unrealized (0 2) (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (1 0)) ((4 3) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k))))+  (label 54)+  (parent 32)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (5 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 55)+  (parent 33)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 56)+  (parent 35)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 57)+  (parent 35)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 0)) ((2 1) (1 0))+    ((3 1) (2 0)) ((4 1) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))))+  (label 58)+  (parent 35)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 59)+  (parent 35)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k)))) ((recv k) (send k)))+  (label 60)+  (parent 35)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 61)+  (parent 36)+  (unrealized (4 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 62)+  (parent 37)+  (unrealized (4 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 63)+  (parent 39)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 64)+  (parent 41)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 65)+  (parent 42)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 66)+  (parent 42)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-1 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 67)+  (parent 42)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 68)+  (parent 42)+  (unrealized (0 2) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 69)+  (parent 42)+  (unrealized (0 2) (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 70)+  (parent 43)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 71)+  (parent 44)+  (unrealized (4 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (4 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 72)+  (parent 45)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 73)+  (parent 47)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 74)+  (parent 47)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((3 3) (1 2)) ((4 1) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 75)+  (parent 47)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 76)+  (parent 47)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+  (label 77)+  (parent 47)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 1))+    ((3 1) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 78)+  (parent 48)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 79)+  (parent 49)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 80)+  (parent 49)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 2)) ((2 1) (4 0))+    ((3 1) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 81)+  (parent 49)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 82)+  (parent 49)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 83)+  (parent 49)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 84)+  (parent 51)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 85)+  (parent 51)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 1)) ((2 1) (1 0))+    ((3 1) (2 0)) ((4 2) (1 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k)))))+  (label 86)+  (parent 51)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 87)+  (parent 51)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv k) (send k)))+  (label 88)+  (parent 51)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb-0 (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-0 k)))))+  (label 89)+  (parent 52)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 90)+  (parent 53)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 91)+  (parent 53)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 92)+  (parent 53)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 rb-prime-0 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 93)+  (parent 53)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 94)+  (parent 53)+  (unrealized (0 2) (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 95)+  (parent 54)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 96)+  (parent 54)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 97)+  (parent 54)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0))+    ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv k) (send k)))+  (label 98)+  (parent 54)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 99)+  (parent 55)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 100)+  (parent 56)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 101)+  (parent 57)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 102)+  (parent 59)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 103)+  (parent 62)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 104)+  (parent 62)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (4 2)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (1 2)) ((4 1) (1 0)) ((4 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 105)+  (parent 62)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (ra-prime (4 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 106)+  (parent 62)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 107)+  (parent 62)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 108)+  (parent 64)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 109)+  (parent 64)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 5 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 110)+  (parent 64)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 111)+  (parent 64)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv k) (send k)))+  (label 112)+  (parent 64)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 113)+  (parent 65)+  (unrealized (0 2) (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 114)+  (parent 66)+  (unrealized (0 2) (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 115)+  (parent 67)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 116)+  (parent 67)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 117)+  (parent 67)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 118)+  (parent 67)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 119)+  (parent 68)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 1))+    ((3 1) (1 0)) ((3 3) (1 2)) ((4 0) (0 0)) ((4 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 5 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (4 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 120)+  (parent 70)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (ra-prime (3 1))+    (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 121)+  (parent 71)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 122)+  (parent 71)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 tb-0 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 123)+  (parent 71)+  (unrealized (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (4 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 124)+  (parent 71)+  (unrealized (5 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 125)+  (parent 73)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 126)+  (parent 74)+  (unrealized (5 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 127)+  (parent 76)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 128)+  (parent 79)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 129)+  (parent 80)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 rb-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 130)+  (parent 82)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 131)+  (parent 84)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 132)+  (parent 85)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 133)+  (parent 87)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 134)+  (parent 89)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-1) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 1)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+  (label 135)+  (parent 90)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 136)+  (parent 91)+  (unrealized (0 2) (6 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 137)+  (parent 92)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test+    (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-1 tb-0)) k (6 0)+    (enc a k tb-0 (ltk b ks)) (enc b ra-0 k tb-0 (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 138)+  (parent 93)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 139)+  (parent 95)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 140)+  (parent 96)+  (unrealized (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 0)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 141)+  (parent 97)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 142)+  (parent 99)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 143)+  (parent 99)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 144)+  (parent 99)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 145)+  (parent 99)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))) ((recv k) (send k)))+  (label 146)+  (parent 99)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 147)+  (parent 100)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 148)+  (parent 101)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 149)+  (parent 101)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((1 1) (5 2)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 150)+  (parent 101)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 151)+  (parent 101)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 152)+  (parent 101)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 153)+  (parent 103)+  (unrealized (5 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 154)+  (parent 104)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 155)+  (parent 106)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (3 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 156)+  (parent 108)+  (unrealized (5 1))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 157)+  (parent 109)+  (unrealized (5 2))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 158)+  (parent 111)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (4 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 159)+  (parent 113)+  (unrealized (0 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 160)+  (parent 114)+  (unrealized (0 2) (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 161)+  (parent 114)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (0 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-2 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 162)+  (parent 114)+  (unrealized (0 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 163)+  (parent 114)+  (unrealized (0 2) (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 164)+  (parent 114)+  (unrealized (0 2) (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 165)+  (parent 115)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 166)+  (parent 116)+  (unrealized (5 2))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 167)+  (parent 117)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (4 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 168)+  (parent 119)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 169)+  (parent 119)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 170)+  (parent 119)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 171)+  (parent 119)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))) ((recv k) (send k)))+  (label 172)+  (parent 119)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 173)+  (parent 121)+  (unrealized (5 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 174)+  (parent 122)+  (unrealized (5 2))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 1) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (5 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 175)+  (parent 123)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (3 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 0) (0 0)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 176)+  (parent 125)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 177)+  (parent 126)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 178)+  (parent 126)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 179)+  (parent 126)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (3 2))+    ((4 1) (5 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 4 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 180)+  (parent 126)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 181)+  (parent 126)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 182)+  (parent 126)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 0) (0 0))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 183)+  (parent 128)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra (5 0)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 184)+  (parent 129)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 185)+  (parent 129)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((1 1) (5 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (1 2)) ((4 3) (0 2)) ((5 1) (1 0))+    ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 186)+  (parent 129)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      rb-prime-1 tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 187)+  (parent 129)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 188)+  (parent 129)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 189)+  (parent 131)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 190)+  (parent 132)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 191)+  (parent 132)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((1 1) (5 2)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 2) (1 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 192)+  (parent 132)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb rb) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (rb (0 1)) (ra-prime (5 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 193)+  (parent 132)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 194)+  (parent 132)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 195)+  (parent 134)+  (unrealized (6 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 196)+  (parent 134)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra ra-prime rb-prime tb ra-0 rb rb-0 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((1 1) (4 2)) ((2 1) (1 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-1 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (cat a ra-0)) (send (cat b rb-0 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 197)+  (parent 134)+  (unrealized)+  (shape)+  (maps+    ((0 1)+      ((ra ra) (tb tb) (rb ra-prime) (a a) (b b) (ks ks) (k k)+        (ra-prime ra-prime) (rb-prime rb-prime) (tb-0 tb))))+  (origs (k (2 1)) (ra-prime (0 1)) (rb-prime (1 1))))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 198)+  (parent 134)+  (unrealized (6 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0)) ((2 1) (5 1))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 2) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv k) (send k)))+  (label 199)+  (parent 134)+  (unrealized (6 0))+  (comment "empty cohort"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc b ra-1 k tb-0 (ltk a ks)) (6 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb-0 (ltk b ks)) (enc ra-prime-1 k)))))+  (label 200)+  (parent 135)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(comment "Strand bound exceeded--aborting run")++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 ra-1 tb-1 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-2) (tb tb-1) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 1)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 2) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-1 (ltk a-0 ks-0))+          (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) (enc ra-prime-2 k)))))+  (label 201)+  (parent 136)+  (unrealized (0 2) (7 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 ra-prime-3 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 3) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-1 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 202)+  (parent 136)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (6 2)) ((2 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 3) (4 2))+    ((6 1) (1 0)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 1 resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))))+  (label 203)+  (parent 136)+  (unrealized (0 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 rb-prime-0 tb-1 text)+    (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb-1) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-2 k) (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-1 (ltk b-0 ks-0)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 204)+  (parent 136)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime tb-0 ra-0 rb-0 rb-1 ra-prime-0+      ra-prime-1 ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb-0) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb-0) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((2 1) (7 0)) ((3 1) (2 0))+    ((4 3) (1 2)) ((5 3) (4 2)) ((6 3) (5 2)) ((7 1) (6 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-2 k)+    (6 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb-0 (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb-0 (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb-0 (ltk a ks)) (enc a k tb-0 (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0))+      (send (cat b rb-1 (enc a ra-0 tb-0 (ltk b ks)))))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb-0 (ltk b ks)))+      (send (cat (enc a k tb-0 (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 205)+  (parent 136)+  (unrealized (0 2) (7 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 206)+  (parent 137)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 207)+  (parent 137)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0))+    ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 208)+  (parent 137)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((1 1) (5 2)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 1) (2 0)) ((4 3) (1 2)) ((5 1) (1 0)) ((5 3) (4 2))+    ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 209)+  (parent 137)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 210)+  (parent 138)+  (unrealized (0 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 1)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 1))+    ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 211)+  (parent 139)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a-0 ra-1))+      (recv+        (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-0 k)))))+  (label 212)+  (parent 140)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 213)+  (parent 140)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-0 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 214)+  (parent 140)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (5 2)) ((1 1) (4 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 0)) ((4 3) (1 2))+    ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-0 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 215)+  (parent 140)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 216)+  (parent 142)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 217)+  (parent 143)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 218)+  (parent 145)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 219)+  (parent 148)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      ra-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 220)+  (parent 149)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 rb-prime-0 ra-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 0)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-1 (enc ra-prime-0 k)))))+  (label 221)+  (parent 151)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 222)+  (parent 154)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 223)+  (parent 154)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((1 1) (5 2)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 0) (0 0)) ((3 2) (1 2)) ((4 3) (0 2))+    ((5 1) (1 0)) ((5 3) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k))))+  (label 224)+  (parent 154)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 225)+  (parent 154)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 0) (0 0)) ((3 2) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 226)+  (parent 154)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((4 2) (5 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 4 init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 227)+  (parent 157)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 228)+  (parent 157)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 229)+  (parent 157)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((1 1) (5 2)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((3 3) (1 2)) ((4 0) (0 0))+    ((4 2) (3 2)) ((5 1) (1 0)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb (enc ra-prime k))) (send (enc rb k))))+  (label 230)+  (parent 157)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 231)+  (parent 157)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 0) (0 0)) ((4 2) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 232)+  (parent 157)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 233)+  (parent 159)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 234)+  (parent 159)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb ra-prime rb-prime rb ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb ra-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((1 1) (3 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra ra-prime rb-prime k)+  (operation encryption-test (displaced 6 1 resp-reauth 2) (enc rb-0 k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b ra-prime (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc ra-prime k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 235)+  (parent 159)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 236)+  (parent 159)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-1) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 1)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 0) (0 0)) ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k))))+    ((recv k) (send k)))+  (label 237)+  (parent 159)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-2) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-2))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-2 k)))))+  (label 238)+  (parent 160)+  (unrealized (0 2) (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      ra-prime-3 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-3) (rb-prime ra-prime-2)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-3))+      (recv (cat ra-prime-2 (enc ra-prime-3 k)))+      (send (enc ra-prime-2 k))))+  (label 239)+  (parent 161)+  (unrealized (0 2) (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 240)+  (parent 162)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 241)+  (parent 162)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb-0)+    (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2) (enc rb k)+    (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 242)+  (parent 162)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (5 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 3) (3 2))+    ((5 1) (1 0)) ((5 3) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-1 (enc ra-prime k)))+      (send (enc ra-prime-1 k))) ((recv k) (send k)))+  (label 243)+  (parent 162)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      rb-prime-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-2) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (0 2)) ((2 1) (1 0))+    ((2 1) (3 0)) ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0))+    ((3 3) (1 2)) ((4 3) (3 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (send (cat rb-prime-0 (enc ra-prime-2 k)))))+  (label 244)+  (parent 163)+  (unrealized (0 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((5 0) (0 0)) ((5 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 245)+  (parent 165)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 246)+  (parent 166)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 3) (1 2)) ((4 1) (1 0)) ((4 3) (3 2))+    ((4 3) (5 2)) ((5 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 4 init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k))))+  (label 247)+  (parent 166)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 248)+  (parent 166)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 249)+  (parent 166)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (4 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2)) ((4 1) (1 0))+    ((4 3) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat ra-prime-0 (enc ra-prime k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv k) (send k)))+  (label 250)+  (parent 166)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 251)+  (parent 168)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat rb (enc ra-prime-2 k))) (send (enc rb k))))+  (label 252)+  (parent 169)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-1) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 3) (3 2)) ((5 1) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-1 (enc rb k)))))+  (label 253)+  (parent 171)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 text) (a b ks name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra) (rb ra-prime-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((3 1) (1 0)) ((3 3) (1 2)) ((4 3) (0 2))+    ((5 0) (0 0)) ((5 2) (4 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 6 2 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (5 1))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra))+      (recv+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 254)+  (parent 173)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-0 tb-0+      text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init 3) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc ra-prime-1 k)))))+  (label 255)+  (parent 174)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 ra-prime-2+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand init-reauth 4)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a-0 k tb-0 (ltk b-0 ks-0)))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 256)+  (parent 174)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 rb-prime-0+      tb-0 text) (a b ks a-0 b-0 ks-0 name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-0)+    (tb tb-0) (a a-0) (b b-0) (ks ks-0) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-strand resp-reauth 2)+    (enc ra-prime-1 k) (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) ra-prime-1))+      (send (cat rb-prime-0 (enc ra-prime-1 k)))))+  (label 257)+  (parent 174)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 ra-prime-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (deflistener k)+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (3 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 0)) ((3 3) (1 2))+    ((4 3) (0 2)) ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (added-listener k) (enc ra-prime-1 k)+    (5 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime))+      (recv (cat rb-prime (enc ra-prime k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))) ((recv k) (send k)))+  (label 258)+  (parent 174)+  (unrealized (6 0))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 1)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 259)+  (parent 177)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 260)+  (parent 178)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 ra-prime-0 rb-prime-0 ra-prime-1+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 2)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((2 1) (5 0)) ((2 1) (6 0)) ((3 3) (1 2))+    ((4 1) (3 2)) ((5 3) (0 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 261)+  (parent 181)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 262)+  (parent 184)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      ra-prime-2 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-2) (rb-prime ra-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-2))+      (recv (cat ra-prime-1 (enc ra-prime-2 k)))+      (send (enc ra-prime-1 k))))+  (label 263)+  (parent 185)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra tb rb ra-prime rb-prime rb-0 rb-prime-0 ra-prime-0 ra-prime-1+      rb-prime-1 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp-reauth 2 (ra-prime rb-prime) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-1) (rb-prime rb-prime-1)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 0)) ((3 1) (1 2)) ((4 3) (0 2))+    ((5 3) (4 2)) ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv (cat (enc a k tb (ltk b ks)) rb-prime))+      (send (cat rb-prime-0 (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (send (cat rb-prime-1 (enc ra-prime-1 k)))))+  (label 264)+  (parent 187)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 1)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k)))))+  (label 265)+  (parent 190)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 3) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k))))+  (label 266)+  (parent 191)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init 3 (ra ra-0) (rb rb-prime) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime ra-prime-0) (rb-prime rb-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (5 2)) ((1 1) (4 1)) ((2 1) (1 0)) ((2 1) (5 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 2) (1 2)) ((5 3) (0 2))+    ((6 1) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-prime))+      (send (cat (enc a k tb (ltk b ks)) (enc rb-prime k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb (enc ra-prime-0 k))) (send (enc rb k)))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (send (cat rb-prime-0 (enc ra-prime-0 k)))))+  (label 267)+  (parent 193)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-1 text)+    (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init 3 (ra ra-1) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 1)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 1) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((send (cat a ra-1))+      (recv+        (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 268)+  (parent 195)+  (unrealized (6 1))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime rb) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 2)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 3) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat rb (enc ra-prime-1 k))) (send (enc rb k))))+  (label 269)+  (parent 196)+  (unrealized (6 2))+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 rb-prime-0+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-0) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (defstrand resp-reauth 2 (ra-prime rb) (rb-prime rb-prime-0) (tb tb)+    (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (6 0)) ((1 1) (4 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 1)) ((2 1) (6 0)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 2) (4 2)) ((6 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (6 0) (enc a k tb (ltk b ks)) (enc b ra-0 k tb (ltk a ks)))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-0))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-0 k))))+    ((recv (cat (enc a k tb (ltk b ks)) rb))+      (send (cat rb-prime-0 (enc rb k)))))+  (label 270)+  (parent 198)+  (unrealized)+  (comment "aborted"))++(defskeleton neuman-stubblebine-reauth+  (vars+    (ra rb ra-prime rb-prime tb ra-0 rb-0 rb-1 ra-prime-0 ra-prime-1+      text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand resp-reauth 3 (ra-prime ra-prime) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand resp 2 (ra ra-0) (rb rb-1) (tb tb) (a a) (b b) (ks ks))+  (defstrand init-reauth 4 (ra-prime ra-prime-0) (rb-prime rb-prime)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init-reauth 4 (ra-prime ra-prime-1) (rb-prime ra-prime-0)+    (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand init 3 (ra ra-0) (rb ra-prime-1) (tb tb) (a a) (b b)+    (ks ks) (k k))+  (precedes ((1 1) (4 2)) ((2 1) (0 2)) ((2 1) (1 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((2 1) (6 1)) ((3 1) (2 0)) ((4 3) (1 2))+    ((5 3) (4 2)) ((6 2) (5 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb ra-prime rb-prime k)+  (operation encryption-test (displaced 7 2 keyserver 2)+    (enc a k tb-0 (ltk b ks)) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat (enc a k tb (ltk b ks)) ra-prime))+      (send (cat rb-prime (enc ra-prime k))) (recv (enc rb-prime k)))+    ((recv (cat b rb-0 (enc a ra-0 tb (ltk b ks))))+      (send+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          rb-0)))+    ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-0))+      (recv (cat rb-prime (enc ra-prime-0 k))) (send (enc rb-prime k)))+    ((recv (enc a k tb (ltk b ks)))+      (send (cat (enc a k tb (ltk b ks)) ra-prime-1))+      (recv (cat ra-prime-0 (enc ra-prime-1 k)))+      (send (enc ra-prime-0 k)))+    ((send (cat a ra-0))+      (recv+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks))+          ra-prime-1))+      (send (cat (enc a k tb (ltk b ks)) (enc ra-prime-1 k)))))+  (label 271)+  (parent 200)   (unrealized (0 2))   (comment "aborted"))
tst/neuman-stubblebine.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol neuman-stubblebine basic@@ -135,6 +135,27 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton neuman-stubblebine+  (vars (ra rb tb rb-0 text) (a b ks name) (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb k)+  (operation encryption-test (displaced 2 0 resp 2)+    (enc a ra-0 tb (ltk b ks)) (1 0))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))+  (label 5)+  (parent 4)+  (unrealized (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton neuman-stubblebine   (vars (ra rb tb ra-0 rb-0 rb-1 text) (a b ks name) (k skey))   (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)@@ -154,31 +175,60 @@           rb-0)))     ((recv (cat a ra-0))       (send (cat b rb-1 (enc a ra-0 tb (ltk b ks))))))-  (label 5)+  (label 6)   (parent 4)   (unrealized (0 2))   (comment "2 in cohort - 2 not yet seen"))  (defskeleton neuman-stubblebine+  (vars (ra rb tb rb-0 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name)+    (k skey))+  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)+    (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)+    (ks ks-0) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (2 1)) ((2 2) (0 2)))+  (non-orig (ltk a ks) (ltk b ks))+  (uniq-orig ra rb k)+  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (traces+    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))+      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))+    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))+      (send+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((send (cat a-0 ra-0))+      (recv+        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))+          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))+      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))+  (label 7)+  (parent 5)+  (unrealized (2 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton neuman-stubblebine   (vars (ra rb tb rb-0 text) (a b ks name) (k skey))   (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)     (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (deflistener k)+  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig ra rb k)-  (operation encryption-test (displaced 2 0 resp 2)-    (enc a ra-0 tb (ltk b ks)) (1 0))+  (operation encryption-test (added-listener k) (enc rb k) (0 2))   (traces     ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))       (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))     ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))       (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0))))-  (label 6)-  (parent 4)-  (unrealized (0 2))-  (comment "2 in cohort - 2 not yet seen"))+        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))+    ((recv k) (send k)))+  (label 8)+  (parent 5)+  (unrealized (2 0))+  (comment "empty cohort"))  (defskeleton neuman-stubblebine   (vars (ra rb tb ra-0 rb-0 rb-1 ra-1 tb-0 text)@@ -206,8 +256,8 @@         (cat (enc b-0 ra-1 k tb-0 (ltk a-0 ks-0))           (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))       (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 7)-  (parent 5)+  (label 9)+  (parent 6)   (unrealized (3 1))   (comment "1 in cohort - 1 not yet seen")) @@ -231,62 +281,38 @@           rb-0)))     ((recv (cat a ra-0)) (send (cat b rb-1 (enc a ra-0 tb (ltk b ks)))))     ((recv k) (send k)))-  (label 8)-  (parent 5)+  (label 10)+  (parent 6)   (unrealized (3 0))   (comment "empty cohort"))  (defskeleton neuman-stubblebine-  (vars (ra rb tb rb-0 ra-0 tb-0 text) (a b ks a-0 b-0 ks-0 name)-    (k skey))+  (vars (ra rb tb rb-0 ra-0 text) (a b ks name) (k skey))   (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)     (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb-0) (a a-0) (b b-0)-    (ks ks-0) (k k))+  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))   (precedes ((0 1) (1 0)) ((1 1) (2 1)) ((2 2) (0 2)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig ra rb k)-  (operation encryption-test (added-strand init 3) (enc rb k) (0 2))+  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))+    k (2 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))   (traces     ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))       (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))     ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))       (send         (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a-0 ra-0))+    ((send (cat a ra-0))       (recv-        (cat (enc b-0 ra-0 k tb-0 (ltk a-0 ks-0))-          (enc a-0 k tb-0 (ltk b-0 ks-0)) rb))-      (send (cat (enc a-0 k tb-0 (ltk b-0 ks-0)) (enc rb k)))))-  (label 9)-  (parent 6)+        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))+  (label 11)+  (parent 7)   (unrealized (2 1))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton neuman-stubblebine-  (vars (ra rb tb rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (deflistener k)-  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb k)-  (operation encryption-test (added-listener k) (enc rb k) (0 2))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((recv k) (send k)))-  (label 10)-  (parent 6)-  (unrealized (2 0))-  (comment "empty cohort"))--(defskeleton neuman-stubblebine   (vars (ra rb tb ra-0 rb-0 rb-1 ra-1 text) (a b ks name) (k skey))   (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (ra ra-0) (rb rb-0) (tb tb) (a a) (b b) (ks ks)@@ -310,38 +336,37 @@       (recv         (cat (enc b ra-1 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))       (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 11)-  (parent 7)-  (seen 13)+  (label 12)+  (parent 9)   (unrealized (3 1))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton neuman-stubblebine-  (vars (ra rb tb rb-0 ra-0 text) (a b ks name) (k skey))+  (vars (ra rb tb rb-0 text) (a b ks name) (k skey))   (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))   (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)     (k k))-  (defstrand init 3 (ra ra-0) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (2 1)) ((2 2) (0 2)))+  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (2 1)) ((2 0) (0 0)) ((2 2) (0 2)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig ra rb k)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (ks-0 ks) (tb-0 tb))-    k (2 1) (enc a k tb (ltk b ks)) (enc b ra k tb (ltk a ks)))+  (operation encryption-test (displaced 3 1 keyserver 2)+    (enc b ra-0 k tb (ltk a ks)) (2 1))   (traces     ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))       (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))     ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))       (send         (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra-0))-      (recv-        (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))+    ((send (cat a ra))+      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))       (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 12)-  (parent 9)-  (seen 14)-  (unrealized (2 1))-  (comment "2 in cohort - 1 not yet seen"))+  (label 13)+  (parent 11)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb))))+  (origs (k (1 1)) (ra (2 0)) (rb (0 1))))  (defskeleton neuman-stubblebine   (vars (ra rb tb ra-0 rb-0 rb-1 text) (a b ks name) (k skey))@@ -353,8 +378,8 @@   (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2)))   (non-orig (ltk a ks) (ltk b ks))   (uniq-orig ra rb k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra-0 k tb (ltk a ks)) (3 1))+  (operation encryption-test (displaced 4 1 keyserver 2)+    (enc b ra-1 k tb (ltk a ks)) (3 1))   (traces     ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))       (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))@@ -367,41 +392,12 @@       (recv         (cat (enc b ra-0 k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))       (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))-  (label 13)-  (parent 11)-  (seen 14)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb))))-  (origs (k (1 1)) (rb (0 1)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton neuman-stubblebine-  (vars (ra rb tb rb-0 text) (a b ks name) (k skey))-  (defstrand resp 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (defstrand keyserver 2 (ra ra) (rb rb-0) (tb tb) (a a) (b b) (ks ks)-    (k k))-  (defstrand init 3 (ra ra) (rb rb) (tb tb) (a a) (b b) (ks ks) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (2 1)) ((2 0) (0 0)) ((2 2) (0 2)))-  (non-orig (ltk a ks) (ltk b ks))-  (uniq-orig ra rb k)-  (operation encryption-test (added-strand keyserver 2)-    (enc b ra k tb (ltk a ks)) (2 1))-  (traces-    ((recv (cat a ra)) (send (cat b rb (enc a ra tb (ltk b ks))))-      (recv (cat (enc a k tb (ltk b ks)) (enc rb k))))-    ((recv (cat b rb-0 (enc a ra tb (ltk b ks))))-      (send-        (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb-0)))-    ((send (cat a ra))-      (recv (cat (enc b ra k tb (ltk a ks)) (enc a k tb (ltk b ks)) rb))-      (send (cat (enc a k tb (ltk b ks)) (enc rb k)))))   (label 14)   (parent 12)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (ks ks) (ra ra) (rb rb) (k k) (tb tb))))-  (origs (k (1 1)) (ra (2 0)) (rb (0 1))))+  (origs (k (1 1)) (rb (0 1))))  (comment "Nothing left to do")
tst/no_contraction.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol no-contraction basic@@ -33,10 +33,9 @@     ((send (enc (enc n (privk a-0)) (pubk b)))))   (label 1)   (parent 0)-  (seen 2)   (unrealized (0 0))   (origs (n (1 0)))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton no-contraction   (vars (n text) (a b name))@@ -45,7 +44,7 @@   (precedes ((1 0) (0 0)))   (non-orig (privk a))   (uniq-orig n)-  (operation encryption-test (added-strand init 1) (enc n (privk a))+  (operation encryption-test (displaced 2 1 init 1) (enc n (privk a-0))     (0 0))   (traces ((recv (enc n (privk a))))     ((send (enc (enc n (privk a)) (pubk b)))))
tst/non_transforming.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol non_transforming basic@@ -31,6 +31,21 @@   (comment "1 in cohort - 1 not yet seen"))  (defskeleton non_transforming+  (vars (a d text) (B B0 name))+  (defstrand recv 2 (a a) (b d) (B B))+  (defstrand sender 1 (a a) (b d) (B B0))+  (precedes ((1 0) (0 0)))+  (non-orig (privk B0))+  (uniq-orig a d)+  (operation collapsed 2 1)+  (traces ((recv (enc a (pubk B))) (recv (enc d (pubk B))))+    ((send (enc a d (pubk B0)))))+  (label 1)+  (parent 0)+  (unrealized (0 0) (0 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton non_transforming   (vars (a b c d text) (B B0 B1 name))   (defstrand recv 2 (a a) (b b) (B B))   (defstrand sender 1 (a a) (b d) (B B0))@@ -44,12 +59,31 @@   (traces ((recv (enc a (pubk B))) (recv (enc b (pubk B))))     ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1))))     ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))))-  (label 1)+  (label 2)   (parent 0)   (unrealized (0 0) (0 1))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton non_transforming+  (vars (a d text) (B B0 name))+  (defstrand recv 2 (a a) (b d) (B B))+  (defstrand sender 1 (a a) (b d) (B B0))+  (defstrand breaker 2 (a a) (b d) (B B0))+  (precedes ((1 0) (2 0)) ((2 1) (0 0)))+  (non-orig (privk B0))+  (uniq-orig a d)+  (operation nonce-test (added-strand breaker 2) a (0 0)+    (enc a d (pubk B0)))+  (traces ((recv (enc a (pubk B))) (recv (enc d (pubk B))))+    ((send (enc a d (pubk B0))))+    ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))))+  (label 3)+  (parent 1)+  (unrealized (0 0) (0 1))+  (origs (a (1 0)) (d (1 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton non_transforming   (vars (a b c d text) (B0 B1 name))   (defstrand recv 2 (a a) (b b) (B B0))   (defstrand sender 1 (a a) (b d) (B B0))@@ -63,31 +97,30 @@   (traces ((recv (enc a (pubk B0))) (recv (enc b (pubk B0))))     ((send (enc a d (pubk B0)))) ((send (enc c b (pubk B1))))     ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))))-  (label 2)-  (parent 1)-  (seen 3)+  (label 4)+  (parent 2)   (unrealized (0 1))-  (comment "5 in cohort - 4 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton non_transforming-  (vars (d text) (B0 name))-  (defstrand recv 2 (a d) (b d) (B B0))-  (defstrand sender 1 (a d) (b d) (B B0))-  (defstrand breaker 2 (a d) (b d) (B B0))+  (vars (a d text) (B0 name))+  (defstrand recv 2 (a a) (b d) (B B0))+  (defstrand sender 1 (a a) (b d) (B B0))+  (defstrand breaker 2 (a a) (b d) (B B0))   (precedes ((1 0) (2 0)) ((2 1) (0 0)))   (non-orig (privk B0))-  (uniq-orig d)-  (operation nonce-test (displaced 4 1 sender 1) b (0 1)-    (enc c b (pubk B1)))-  (traces ((recv (enc d (pubk B0))) (recv (enc d (pubk B0))))-    ((send (enc d d (pubk B0))))-    ((recv (enc d d (pubk B0))) (send (enc d (pubk B0)))))-  (label 3)-  (parent 2)-  (unrealized)-  (shape)-  (maps ((0 1 1) ((a d) (b d) (c d) (d d) (B B0) (B0 B0) (B1 B0))))-  (origs (d (1 0))))+  (uniq-orig a d)+  (operation nonce-test (contracted (B B0)) a (0 0) (enc a (pubk B0))+    (enc a d (pubk B0)))+  (traces ((recv (enc a (pubk B0))) (recv (enc d (pubk B0))))+    ((send (enc a d (pubk B0))))+    ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))))+  (label 5)+  (parent 3)+  (seen 8)+  (unrealized (0 1))+  (origs (a (1 0)) (d (1 0)))+  (comment "5 in cohort - 4 not yet seen"))  (defskeleton non_transforming   (vars (a b c d text) (B0 B1 name))@@ -106,31 +139,10 @@     ((recv (enc a d (pubk B0))) (send (enc a (pubk B0))))     ((recv (enc c b (pubk B1))) (send (enc c (pubk B1)))       (send (enc b (pubk B1)))))-  (label 4)-  (parent 2)+  (label 6)+  (parent 4)   (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton non_transforming-  (vars (b c text) (B1 name))-  (defstrand recv 2 (a c) (b b) (B B1))-  (defstrand sender 1 (a c) (b b) (B B1))-  (defstrand breaker 3 (a c) (b b) (B B1))-  (precedes ((1 0) (2 0)) ((2 1) (0 0)) ((2 2) (0 1)))-  (non-orig (privk B1))-  (uniq-orig b c)-  (operation nonce-test (displaced 3 4 breaker 3) b (0 1)-    (enc c b (pubk B1)))-  (traces ((recv (enc c (pubk B1))) (recv (enc b (pubk B1))))-    ((send (enc c b (pubk B1))))-    ((recv (enc c b (pubk B1))) (send (enc c (pubk B1)))-      (send (enc b (pubk B1)))))-  (label 5)-  (parent 2)-  (unrealized)-  (shape)-  (maps ((0 1 1) ((a c) (b b) (c c) (d b) (B B1) (B0 B1) (B1 B1))))-  (origs (c (1 0)) (b (1 0))))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton non_transforming   (vars (a c d text) (B0 B1 name))@@ -148,59 +160,51 @@     ((send (enc a d (pubk B0)))) ((send (enc c c (pubk B1))))     ((recv (enc a d (pubk B0))) (send (enc a (pubk B0))))     ((recv (enc c c (pubk B1))) (send (enc c (pubk B1)))))-  (label 6)-  (parent 2)-  (seen 11)+  (label 7)+  (parent 4)   (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton non_transforming-  (vars (a b c d text) (B1 name))-  (defstrand recv 2 (a a) (b b) (B B1))-  (defstrand sender 1 (a a) (b d) (B B1))-  (defstrand sender 1 (a c) (b b) (B B1))-  (defstrand breaker 2 (a a) (b d) (B B1))-  (defstrand breaker 3 (a c) (b b) (B B1))-  (precedes ((1 0) (3 0)) ((2 0) (4 0)) ((3 1) (0 0)) ((4 2) (0 1)))-  (non-orig (privk B1))-  (uniq-orig a b c d)-  (operation nonce-test (contracted (B0 B1)) b (0 1) (enc b (pubk B1))-    (enc c b (pubk B1)))-  (traces ((recv (enc a (pubk B1))) (recv (enc b (pubk B1))))-    ((send (enc a d (pubk B1)))) ((send (enc c b (pubk B1))))-    ((recv (enc a d (pubk B1))) (send (enc a (pubk B1))))-    ((recv (enc c b (pubk B1))) (send (enc c (pubk B1)))-      (send (enc b (pubk B1)))))-  (label 7)-  (parent 4)-  (seen 5 9)+  (vars (a text) (B0 name))+  (defstrand recv 2 (a a) (b a) (B B0))+  (defstrand sender 1 (a a) (b a) (B B0))+  (defstrand breaker 2 (a a) (b a) (B B0))+  (precedes ((1 0) (2 0)) ((2 1) (0 0)))+  (non-orig (privk B0))+  (uniq-orig a)+  (operation nonce-test (displaced 3 1 sender 1) d (0 1)+    (enc a d (pubk B0)))+  (traces ((recv (enc a (pubk B0))) (recv (enc a (pubk B0))))+    ((send (enc a a (pubk B0))))+    ((recv (enc a a (pubk B0))) (send (enc a (pubk B0)))))+  (label 8)+  (parent 5)   (unrealized)   (shape)-  (maps ((0 1 2) ((a a) (b b) (c c) (d d) (B B1) (B0 B1) (B1 B1))))-  (origs (c (2 0)) (d (1 0)) (a (1 0)) (b (2 0)))-  (comment "2 in cohort - 0 not yet seen"))+  (maps ((0 1 1) ((a a) (b a) (c a) (d a) (B B0) (B0 B0) (B1 B0))))+  (origs (a (1 0))))  (defskeleton non_transforming-  (vars (d text) (B0 name))-  (defstrand recv 2 (a d) (b d) (B B0))-  (defstrand sender 1 (a d) (b d) (B B0))-  (defstrand breaker 2 (a d) (b d) (B B0))-  (defstrand breaker 3 (a d) (b d) (B B0))-  (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (0 0)) ((3 2) (0 1)))+  (vars (a d text) (B0 name))+  (defstrand recv 2 (a a) (b d) (B B0))+  (defstrand sender 1 (a a) (b d) (B B0))+  (defstrand breaker 3 (a a) (b d) (B B0))+  (precedes ((1 0) (2 0)) ((2 1) (0 0)) ((2 2) (0 1)))   (non-orig (privk B0))-  (uniq-orig d)-  (operation nonce-test (displaced 5 1 sender 1) b (0 1)-    (enc b (pubk B1)) (enc c b (pubk B1)))-  (traces ((recv (enc d (pubk B0))) (recv (enc d (pubk B0))))-    ((send (enc d d (pubk B0))))-    ((recv (enc d d (pubk B0))) (send (enc d (pubk B0))))-    ((recv (enc d d (pubk B0))) (send (enc d (pubk B0)))+  (uniq-orig a d)+  (operation nonce-test (displaced 2 3 breaker 3) d (0 1)+    (enc a d (pubk B0)))+  (traces ((recv (enc a (pubk B0))) (recv (enc d (pubk B0))))+    ((send (enc a d (pubk B0))))+    ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))       (send (enc d (pubk B0)))))-  (label 8)-  (parent 4)-  (seen 3)+  (label 9)+  (parent 5)   (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (shape)+  (maps ((0 1 1) ((a a) (b d) (c a) (d d) (B B0) (B0 B0) (B1 B0))))+  (origs (a (1 0)) (d (1 0))))  (defskeleton non_transforming   (vars (a d text) (B0 name))@@ -211,23 +215,66 @@   (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (0 0)) ((3 2) (0 1)))   (non-orig (privk B0))   (uniq-orig a d)-  (operation nonce-test (displaced 5 1 sender 1) b (0 1)-    (enc b (pubk B1)) (enc c b (pubk B1)))+  (operation nonce-test (added-strand breaker 3) d (0 1)+    (enc a d (pubk B0)))   (traces ((recv (enc a (pubk B0))) (recv (enc d (pubk B0))))     ((send (enc a d (pubk B0))))     ((recv (enc a d (pubk B0))) (send (enc a (pubk B0))))     ((recv (enc a d (pubk B0))) (send (enc a (pubk B0)))       (send (enc d (pubk B0)))))-  (label 9)-  (parent 4)-  (seen 5)+  (label 10)+  (parent 5)   (unrealized)   (shape)   (maps ((0 1 1) ((a a) (b d) (c a) (d d) (B B0) (B0 B0) (B1 B0))))-  (origs (a (1 0)) (d (1 0)))+  (origs (a (1 0)) (d (1 0))))++(defskeleton non_transforming+  (vars (a text) (B0 name))+  (defstrand recv 2 (a a) (b a) (B B0))+  (defstrand sender 1 (a a) (b a) (B B0))+  (defstrand breaker 2 (a a) (b a) (B B0))+  (defstrand breaker 2 (a a) (b a) (B B0))+  (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (0 0)) ((3 1) (0 1)))+  (non-orig (privk B0))+  (uniq-orig a)+  (operation nonce-test (added-strand breaker 2) a (0 1)+    (enc a a (pubk B0)))+  (traces ((recv (enc a (pubk B0))) (recv (enc a (pubk B0))))+    ((send (enc a a (pubk B0))))+    ((recv (enc a a (pubk B0))) (send (enc a (pubk B0))))+    ((recv (enc a a (pubk B0))) (send (enc a (pubk B0)))))+  (label 11)+  (parent 5)+  (seen 8)+  (unrealized)   (comment "1 in cohort - 0 not yet seen"))  (defskeleton non_transforming+  (vars (a b c d text) (B1 name))+  (defstrand recv 2 (a a) (b b) (B B1))+  (defstrand sender 1 (a a) (b d) (B B1))+  (defstrand sender 1 (a c) (b b) (B B1))+  (defstrand breaker 2 (a a) (b d) (B B1))+  (defstrand breaker 3 (a c) (b b) (B B1))+  (precedes ((1 0) (3 0)) ((2 0) (4 0)) ((3 1) (0 0)) ((4 2) (0 1)))+  (non-orig (privk B1))+  (uniq-orig a b c d)+  (operation nonce-test (contracted (B0 B1)) b (0 1) (enc b (pubk B1))+    (enc c b (pubk B1)))+  (traces ((recv (enc a (pubk B1))) (recv (enc b (pubk B1))))+    ((send (enc a d (pubk B1)))) ((send (enc c b (pubk B1))))+    ((recv (enc a d (pubk B1))) (send (enc a (pubk B1))))+    ((recv (enc c b (pubk B1))) (send (enc c (pubk B1)))+      (send (enc b (pubk B1)))))+  (label 12)+  (parent 6)+  (unrealized)+  (shape)+  (maps ((0 1 2) ((a a) (b b) (c c) (d d) (B B1) (B0 B1) (B1 B1))))+  (origs (c (2 0)) (d (1 0)) (a (1 0)) (b (2 0))))++(defskeleton non_transforming   (vars (a c d text) (B1 name))   (defstrand recv 2 (a a) (b c) (B B1))   (defstrand sender 1 (a a) (b d) (B B1))@@ -243,34 +290,11 @@     ((send (enc a d (pubk B1)))) ((send (enc c c (pubk B1))))     ((recv (enc a d (pubk B1))) (send (enc a (pubk B1))))     ((recv (enc c c (pubk B1))) (send (enc c (pubk B1)))))-  (label 10)-  (parent 6)-  (seen 3 11)+  (label 13)+  (parent 7)   (unrealized)   (shape)   (maps ((0 1 2) ((a a) (b c) (c c) (d d) (B B1) (B0 B1) (B1 B1))))-  (origs (c (2 0)) (d (1 0)) (a (1 0)))-  (comment "2 in cohort - 0 not yet seen"))--(defskeleton non_transforming-  (vars (d text) (B0 name))-  (defstrand recv 2 (a d) (b d) (B B0))-  (defstrand sender 1 (a d) (b d) (B B0))-  (defstrand breaker 2 (a d) (b d) (B B0))-  (defstrand breaker 2 (a d) (b d) (B B0))-  (precedes ((1 0) (2 0)) ((1 0) (3 0)) ((2 1) (0 0)) ((3 1) (0 1)))-  (non-orig (privk B0))-  (uniq-orig d)-  (operation nonce-test (displaced 5 1 sender 1) c (0 1)-    (enc c (pubk B1)) (enc c c (pubk B1)))-  (traces ((recv (enc d (pubk B0))) (recv (enc d (pubk B0))))-    ((send (enc d d (pubk B0))))-    ((recv (enc d d (pubk B0))) (send (enc d (pubk B0))))-    ((recv (enc d d (pubk B0))) (send (enc d (pubk B0)))))-  (label 11)-  (parent 6)-  (seen 3)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (origs (c (2 0)) (d (1 0)) (a (1 0))))  (comment "Nothing left to do")
tst/nonaug-prune.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol nonaug-prune basic@@ -28,12 +28,28 @@     ((recv (enc n A k)) (send (enc n A A A k)))     ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k))))   (label 0)-  (seen 2)+  (seen 4)   (unrealized (0 0) (1 0) (2 2))   (origs (n (2 0)))   (comment "4 in cohort - 3 not yet seen"))  (defskeleton nonaug-prune+  (vars (n text) (B name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))+  (precedes ((1 0) (0 0)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation collapsed 1 0)+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))+  (label 1)+  (parent 0)+  (seen 6)+  (unrealized (0 0) (1 2))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))@@ -48,51 +64,83 @@     ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 1)+  (label 2)   (parent 0)-  (seen 4)   (unrealized (0 0) (1 0) (2 2) (3 1))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune+  (vars (n text) (B name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))+  (precedes ((0 1) (2 2)) ((2 0) (0 0)) ((2 0) (1 0)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (displaced 3 0 trans2 2) n (2 2) (enc n A k)+    (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))+  (label 3)+  (parent 0)+  (unrealized (0 0) (1 0))+  (origs (n (2 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nonaug-prune   (vars (n text) (A B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A A) (B B) (k k))   (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 1) (1 2)))+  (defstrand orig 3 (n n) (A A) (B B) (k k))+  (precedes ((1 1) (2 2)) ((2 0) (0 0)) ((2 0) (1 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand trans2 2) n (2 2) (enc n A k)+  (operation nonce-test (displaced 3 1 trans2 2) n (2 2) (enc n A k)     (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k))))-  (label 2)+    ((recv (enc n A k)) (send (enc n A A A k)))+    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k))))+  (label 4)   (parent 0)-  (seen 5)-  (unrealized (0 0) (2 0))+  (unrealized (0 0) (1 0))+  (origs (n (2 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nonaug-prune+  (vars (n text) (B C name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))+  (defstrand trans1 3 (n n) (A B) (C C) (k k))+  (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((2 2) (1 2)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (added-strand trans1 3) n (1 2) (enc n B k)+    (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 5)+  (parent 1)+  (unrealized (0 0) (1 2) (2 1))   (origs (n (1 0)))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))-  (precedes ((0 1) (2 2)) ((2 0) (0 0)) ((2 0) (1 0)))+  (precedes ((0 1) (1 2)) ((1 0) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (displaced 3 0 trans2 2) n (2 2) (enc n A k)+  (operation nonce-test (displaced 2 0 trans2 2) n (1 2) (enc n B k)     (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))-  (label 3)-  (parent 0)-  (seen 6)-  (unrealized (0 0) (1 0))-  (origs (n (2 0)))-  (comment "2 in cohort - 1 not yet seen"))+  (label 6)+  (parent 1)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))@@ -104,37 +152,18 @@     ((3 2) (2 2)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (3 1) (enc n B B k))+  (operation nonce-test (displaced 4 2 orig 2) n (3 1) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 4)-  (parent 1)-  (seen 7)+  (label 7)+  (parent 2)+  (seen 12)   (unrealized (0 0) (1 0) (2 2))   (comment "3 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune-  (vars (n text) (A B name) (k akey))-  (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A A) (B B) (k k))-  (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (2 0)) ((2 1) (1 2)))-  (non-orig (invk k))-  (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (2 0) (enc n B B k))-  (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k))))-  (label 5)-  (parent 2)-  (seen 8)-  (unrealized (0 0))-  (origs (n (1 0)))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton nonaug-prune   (vars (n text) (B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))@@ -142,59 +171,92 @@   (precedes ((0 1) (2 2)) ((2 0) (0 0)) ((2 1) (1 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (1 0) (enc n B B k))+  (operation nonce-test (displaced 3 2 orig 2) n (1 0) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))-  (label 6)+  (label 8)   (parent 3)-  (seen 9)   (unrealized (0 0))   (origs (n (2 0)))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune+  (vars (n text) (A B name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A A) (k k))+  (defstrand orig 3 (n n) (A A) (B B) (k k))+  (precedes ((1 1) (2 2)) ((2 0) (0 0)) ((2 1) (1 0)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (displaced 3 2 orig 2) n (1 0) (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n A k)) (send (enc n A A A k)))+    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k))))+  (label 9)+  (parent 4)+  (unrealized (0 0))+  (origs (n (2 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (defstrand trans2 2 (n n) (A B) (k k))-  (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((1 0) (3 0)) ((1 1) (2 1))-    ((2 2) (1 2)) ((3 1) (1 2)))+  (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((1 1) (2 1)) ((2 2) (1 2)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand trans2 2) n (2 2) (enc n B k)-    (enc n n C k) (enc n B B k))+  (operation nonce-test (displaced 3 1 orig 2) n (2 1) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))-    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k)))-    ((recv (enc n B k)) (send (enc n B B B k))))-  (label 7)-  (parent 4)-  (seen 10)-  (unrealized (0 0) (3 0))+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 10)+  (parent 5)+  (seen 15)+  (unrealized (0 0) (1 2))+  (origs (n (1 0)))   (comment "2 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune-  (vars (n text) (A B name) (k akey))+  (vars (n text) (B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A A) (B B) (k k))-  (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 1) (0 0)) ((1 1) (2 0)) ((2 1) (1 2)))+  (defstrand orig 3 (n n) (A B) (B B) (k k))+  (precedes ((0 1) (1 2)) ((1 1) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (0 0) (enc n B B k))+  (operation nonce-test (displaced 2 1 orig 2) n (0 0) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k))))-  (label 8)-  (parent 5)-  (seen 9)-  (unrealized (0 0))-  (origs (n (1 0)))-  (comment "4 in cohort - 3 not yet seen"))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))+  (label 11)+  (parent 6)+  (unrealized)+  (shape)+  (maps ((0 0 1) ((n n) (A B) (B B) (k k))))+  (origs (n (1 0))))  (defskeleton nonaug-prune+  (vars (n text) (B C name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))+  (defstrand trans1 3 (n n) (A B) (C C) (k k))+  (precedes ((0 1) (2 2)) ((2 0) (0 0)) ((2 0) (1 0)) ((2 0) (3 0))+    ((2 1) (3 1)) ((3 2) (2 2)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (displaced 4 0 trans2 2) n (2 2) (enc n B k)+    (enc n n C k) (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 12)+  (parent 7)+  (unrealized (0 0) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nonaug-prune   (vars (n text) (B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))@@ -202,308 +264,344 @@   (precedes ((0 1) (2 2)) ((2 1) (0 0)) ((2 1) (1 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (0 0) (enc n B B k))+  (operation nonce-test (displaced 3 2 orig 2) n (0 0) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))-  (label 9)-  (parent 6)+  (label 13)+  (parent 8)   (unrealized)   (shape)   (maps ((0 1 2) ((n n) (A B) (B B) (k k))))+  (origs (n (2 0))))++(defskeleton nonaug-prune+  (vars (n text) (A B name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A A) (k k))+  (defstrand orig 3 (n n) (A A) (B B) (k k))+  (precedes ((1 1) (2 2)) ((2 1) (0 0)) ((2 1) (1 0)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (displaced 3 2 orig 2) n (0 0) (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n A k)) (send (enc n A A A k)))+    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k))))+  (label 14)+  (parent 9)+  (seen 13)+  (unrealized (0 0))   (origs (n (2 0)))-  (comment "1 in cohort - 1 not yet seen"))+  (comment "4 in cohort - 3 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (defstrand trans2 2 (n n) (A B) (k k))-  (precedes ((1 0) (0 0)) ((1 0) (2 0)) ((1 1) (2 1)) ((1 1) (3 0))-    ((2 2) (1 2)) ((3 1) (1 2)))+  (precedes ((0 1) (1 2)) ((1 0) (0 0)) ((1 0) (2 0)) ((1 1) (2 1))+    ((2 2) (1 2)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (3 0) (enc n B B k))+  (operation nonce-test (displaced 3 0 trans2 2) n (1 2) (enc n B k)+    (enc n n C k) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))-    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k)))-    ((recv (enc n B k)) (send (enc n B B B k))))-  (label 10)-  (parent 7)-  (seen 15)+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 15)+  (parent 10)   (unrealized (0 0))-  (comment "2 in cohort - 1 not yet seen"))+  (origs (n (1 0)))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))+  (defstrand trans1 3 (n n) (A B) (C C) (k k))+  (precedes ((0 1) (2 2)) ((2 0) (0 0)) ((2 0) (3 0)) ((2 1) (1 0))+    ((2 1) (3 1)) ((3 2) (2 2)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (displaced 4 2 orig 2) n (1 0) (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 16)+  (parent 12)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nonaug-prune+  (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (precedes ((1 0) (3 0)) ((1 1) (0 0)) ((1 1) (2 0)) ((2 1) (1 2))+  (precedes ((1 1) (2 2)) ((2 0) (3 0)) ((2 1) (0 0)) ((2 1) (1 0))     ((3 2) (0 0)))   (non-orig (invk k))   (uniq-orig n)   (operation nonce-test (added-strand trans1 3) n (0 0) (enc n B k)     (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 11)-  (parent 8)-  (seen 16)+  (label 17)+  (parent 14)   (unrealized (3 1))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (A B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A A) (B B) (k k))   (defstrand trans2 2 (n n) (A A) (k k))-  (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 0) (3 0)) ((1 1) (0 0)) ((1 1) (2 0)) ((2 1) (1 2))-    ((3 1) (0 0)))+  (defstrand orig 3 (n n) (A A) (B B) (k k))+  (precedes ((1 1) (0 0)) ((1 1) (2 2)) ((2 1) (1 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand trans2 2) n (0 0) (enc n A k)+  (operation nonce-test (displaced 3 1 trans2 2) n (0 0) (enc n A k)     (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))     ((recv (enc n A k)) (send (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k))))-  (label 12)-  (parent 8)-  (seen 17)-  (unrealized (0 0) (3 0))-  (comment "2 in cohort - 1 not yet seen"))+    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k))))+  (label 18)+  (parent 14)+  (unrealized (0 0))+  (origs (n (2 0)))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (A B name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A A) (k k))   (defstrand orig 3 (n n) (A A) (B B) (k k))   (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 1) (2 0)) ((2 1) (0 0)) ((2 1) (1 2)))+  (precedes ((1 1) (2 2)) ((2 0) (3 0)) ((2 1) (0 0)) ((2 1) (1 0))+    ((3 1) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (displaced 3 2 trans2 2) n (0 0) (enc n A k)+  (operation nonce-test (added-strand trans2 2) n (0 0) (enc n A k)     (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n A k)) (send (enc n A A A k)))     ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))     ((recv (enc n A k)) (send (enc n A A A k))))-  (label 13)-  (parent 8)-  (unrealized (0 0))-  (origs (n (1 0)))-  (comment "2 in cohort - 2 not yet seen"))+  (label 19)+  (parent 14)+  (unrealized (0 0) (3 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune-  (vars (n text) (B name) (k akey))+  (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))-  (precedes ((0 1) (1 2)) ((1 1) (0 0)))+  (defstrand trans1 3 (n n) (A B) (C C) (k k))+  (precedes ((0 1) (1 2)) ((1 0) (2 0)) ((1 1) (0 0)) ((1 1) (2 1))+    ((2 2) (1 2)))   (non-orig (invk k))   (uniq-orig n)-  (operation collapsed 1 0)+  (operation nonce-test (displaced 3 1 orig 2) n (0 0) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k))))-  (label 14)-  (parent 9)+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 20)+  (parent 15)+  (seen 11)   (unrealized)-  (shape)-  (maps ((0 0 1) ((n n) (A B) (B B) (k k))))-  (origs (n (1 0))))+  (origs (n (1 0)))+  (comment "1 in cohort - 0 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (defstrand trans2 2 (n n) (A B) (k k))-  (precedes ((1 0) (2 0)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 1) (3 0))-    ((2 2) (1 2)) ((3 1) (1 2)))+  (precedes ((0 1) (2 2)) ((2 0) (3 0)) ((2 1) (0 0)) ((2 1) (1 0))+    ((2 1) (3 1)) ((3 2) (2 2)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (0 0) (enc n B B k))+  (operation nonce-test (displaced 4 2 orig 2) n (0 0) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))-    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k)))-    ((recv (enc n B k)) (send (enc n B B B k))))-  (label 15)-  (parent 10)-  (seen 9)+    ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))+  (label 21)+  (parent 16)+  (seen 13)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (precedes ((1 0) (3 0)) ((1 1) (2 0)) ((1 1) (3 1)) ((2 1) (1 2))+  (precedes ((1 1) (2 2)) ((2 0) (3 0)) ((2 1) (1 0)) ((2 1) (3 1))     ((3 2) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (3 1) (enc n B B k))+  (operation nonce-test (displaced 4 2 orig 2) n (3 1) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 16)-  (parent 11)-  (seen 9)+  (label 22)+  (parent 17)+  (seen 13)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))  (defskeleton nonaug-prune-  (vars (n text) (A B name) (k akey))-  (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A A) (B B) (k k))-  (defstrand trans2 2 (n n) (A A) (k k))-  (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 2)) ((3 1) (0 0)))-  (non-orig (invk k))-  (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (3 0) (enc n B B k))-  (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k))))-  (label 17)-  (parent 12)-  (unrealized (0 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nonaug-prune   (vars (n text) (A name) (k akey))   (defstrand trans2 2 (n n) (A A) (k k))-  (defstrand orig 3 (n n) (A A) (B A) (k k))   (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 1) (2 0)) ((2 1) (0 0)) ((2 1) (1 2)))+  (defstrand orig 3 (n n) (A A) (B A) (k k))+  (precedes ((1 1) (0 0)) ((1 1) (2 2)) ((2 1) (1 0)))   (non-orig (invk k))   (uniq-orig n)   (operation nonce-test (contracted (B A)) n (0 0) (enc n A k)     (enc n A A k) (enc n A A A k))   (traces ((recv (enc n A k)) (send (enc n A A A k)))-    ((send (enc n A A k)) (send (enc n A k)) (recv (enc n A A A k)))-    ((recv (enc n A k)) (send (enc n A A A k))))-  (label 18)-  (parent 13)-  (seen 9)+    ((recv (enc n A k)) (send (enc n A A A k)))+    ((send (enc n A A k)) (send (enc n A k)) (recv (enc n A A A k))))+  (label 23)+  (parent 18)+  (seen 13)   (unrealized)-  (origs (n (1 0)))+  (origs (n (2 0)))   (comment "1 in cohort - 0 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (precedes ((1 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 0)) ((2 1) (1 2))+  (precedes ((1 1) (0 0)) ((1 1) (2 2)) ((2 0) (3 0)) ((2 1) (1 0))     ((3 2) (0 0)))   (non-orig (invk k))   (uniq-orig n)   (operation nonce-test (added-strand trans1 3) n (0 0) (enc n B k)     (enc n B B k) (enc n B B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 19)-  (parent 13)-  (seen 22)+  (label 24)+  (parent 18)   (unrealized (3 1))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune-  (vars (n text) (A name) (k akey))-  (defstrand trans2 2 (n n) (A A) (k k))-  (defstrand orig 3 (n n) (A A) (B A) (k k))+  (vars (n text) (A B name) (k akey))+  (defstrand trans2 2 (n n) (A B) (k k))   (defstrand trans2 2 (n n) (A A) (k k))+  (defstrand orig 3 (n n) (A A) (B B) (k k))   (defstrand trans2 2 (n n) (A A) (k k))-  (precedes ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 2)) ((3 1) (0 0)))+  (precedes ((1 1) (2 2)) ((2 1) (1 0)) ((2 1) (3 0)) ((3 1) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (contracted (B A)) n (0 0) (enc n A k)-    (enc n A A k) (enc n A A A k))-  (traces ((recv (enc n A k)) (send (enc n A A A k)))-    ((send (enc n A A k)) (send (enc n A k)) (recv (enc n A A A k)))+  (operation nonce-test (displaced 4 2 orig 2) n (3 0) (enc n B B k))+  (traces ((recv (enc n B k)) (send (enc n B B B k)))     ((recv (enc n A k)) (send (enc n A A A k)))+    ((send (enc n B B k)) (send (enc n A k)) (recv (enc n A A A k)))     ((recv (enc n A k)) (send (enc n A A A k))))-  (label 20)-  (parent 17)-  (seen 9)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (label 25)+  (parent 19)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (precedes ((1 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (1 2))-    ((3 1) (0 0)) ((4 2) (0 0)))+  (precedes ((1 1) (0 0)) ((1 1) (2 2)) ((2 0) (3 0)) ((2 1) (1 0))+    ((2 1) (3 1)) ((3 2) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand trans1 3) n (0 0) (enc n B k)-    (enc n B B k) (enc n B B B k))+  (operation nonce-test (displaced 4 2 orig 2) n (3 1) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))-    ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 21)-  (parent 17)+  (label 26)+  (parent 24)   (seen 23)-  (unrealized (4 1))-  (comment "2 in cohort - 1 not yet seen"))+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))  (defskeleton nonaug-prune+  (vars (n text) (A name) (k akey))+  (defstrand trans2 2 (n n) (A A) (k k))+  (defstrand trans2 2 (n n) (A A) (k k))+  (defstrand orig 3 (n n) (A A) (B A) (k k))+  (defstrand trans2 2 (n n) (A A) (k k))+  (precedes ((1 1) (2 2)) ((2 1) (1 0)) ((2 1) (3 0)) ((3 1) (0 0)))+  (non-orig (invk k))+  (uniq-orig n)+  (operation nonce-test (contracted (B A)) n (0 0) (enc n A k)+    (enc n A A k) (enc n A A A k))+  (traces ((recv (enc n A k)) (send (enc n A A A k)))+    ((recv (enc n A k)) (send (enc n A A A k)))+    ((send (enc n A A k)) (send (enc n A k)) (recv (enc n A A A k)))+    ((recv (enc n A k)) (send (enc n A A A k))))+  (label 27)+  (parent 25)+  (seen 13)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand trans2 2 (n n) (A B) (k k))   (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (precedes ((1 0) (3 0)) ((1 1) (2 0)) ((1 1) (3 1)) ((2 1) (0 0))-    ((2 1) (1 2)) ((3 2) (0 0)))+  (precedes ((1 1) (2 2)) ((2 0) (4 0)) ((2 1) (1 0)) ((2 1) (3 0))+    ((3 1) (0 0)) ((4 2) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (3 1) (enc n B B k))+  (operation nonce-test (added-strand trans1 3) n (0 0) (enc n B k)+    (enc n B B k) (enc n B B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))+    ((recv (enc n B k)) (send (enc n B B B k)))     ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 22)-  (parent 19)-  (seen 18)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (label 28)+  (parent 25)+  (unrealized (4 1))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nonaug-prune   (vars (n text) (B C name) (k akey))   (defstrand trans2 2 (n n) (A B) (k k))-  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))+  (defstrand orig 3 (n n) (A B) (B B) (k k))   (defstrand trans2 2 (n n) (A B) (k k))   (defstrand trans1 3 (n n) (A B) (C C) (k k))-  (precedes ((1 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((1 1) (4 1))-    ((2 1) (1 2)) ((3 1) (0 0)) ((4 2) (0 0)))+  (precedes ((1 1) (2 2)) ((2 0) (4 0)) ((2 1) (1 0)) ((2 1) (3 0))+    ((2 1) (4 1)) ((3 1) (0 0)) ((4 2) (0 0)))   (non-orig (invk k))   (uniq-orig n)-  (operation nonce-test (added-strand orig 2) n (4 1) (enc n B B k))+  (operation nonce-test (displaced 5 2 orig 2) n (4 1) (enc n B B k))   (traces ((recv (enc n B k)) (send (enc n B B B k)))-    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))+    ((send (enc n B B k)) (send (enc n B k)) (recv (enc n B B B k)))     ((recv (enc n B k)) (send (enc n B B B k)))     ((recv (enc n B B k)) (recv (enc n B k)) (send (enc n n C k))))-  (label 23)-  (parent 21)-  (seen 16)+  (label 29)+  (parent 28)+  (seen 22)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/ns.tst view
@@ -1,6 +1,6 @@ (herald "Needham-Schroeder Public-Key Protocol Variants") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol ns basic@@ -97,6 +97,20 @@   (comment "1 in cohort - 1 not yet seen"))  (defskeleton ns+  (vars (n1 n2 text) (a b name))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (non-orig (privk a) (privk b))+  (uniq-orig n1)+  (operation collapsed 1 0)+  (traces+    ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+      (send (enc n2 (pubk b)))))+  (label 4)+  (parent 3)+  (unrealized (0 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns   (vars (n1 n1-0 n2 n2-0 n2-1 text) (a b name))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))@@ -112,12 +126,31 @@     ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a)))       (send (enc n2-0 (pubk b))))     ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-1 (pubk a)))))-  (label 4)+  (label 5)   (parent 3)   (unrealized (0 1) (1 1))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton ns+  (vars (n1 n2 n2-0 text) (a b name))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))+  (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a) (privk b))+  (uniq-orig n1)+  (operation nonce-test (added-strand resp 2) n1 (0 1)+    (enc n1 a (pubk b)))+  (traces+    ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))+      (send (enc n2 (pubk b))))+    ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))+  (label 6)+  (parent 4)+  (unrealized (0 1))+  (origs (n1 (0 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton ns   (vars (n1 n1-0 n2 n2-0 text) (a b name))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))   (defstrand init 3 (n1 n1-0) (n2 n2-0) (a a) (b b))@@ -133,11 +166,10 @@     ((send (enc n1-0 a (pubk b))) (recv (enc n1-0 n2-0 (pubk a)))       (send (enc n2-0 (pubk b))))     ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 (pubk a)))))-  (label 5)-  (parent 4)-  (seen 6)+  (label 7)+  (parent 5)   (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton ns   (vars (n1 n2 text) (a b name))@@ -146,14 +178,14 @@   (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (privk a) (privk b))   (uniq-orig n1)-  (operation nonce-test (displaced 3 1 init 1) n1-0 (0 1)-    (enc n1-0 a (pubk b)))+  (operation nonce-test (contracted (n2-0 n2)) n1 (0 1)+    (enc n1 n2 (pubk a)) (enc n1 a (pubk b)))   (traces     ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))       (send (enc n2 (pubk b))))     ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))))-  (label 6)-  (parent 5)+  (label 8)+  (parent 6)   (unrealized)   (shape)   (maps ((0 0) ((a a) (b b) (n1 n1) (n1-0 n1) (n2 n2) (n2-0 n2))))@@ -177,11 +209,10 @@       (send (enc n2-0 (pubk b))))     ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2-0 (pubk a))))     ((recv (enc n1 a (pubk b))) (send (enc n1 n2-1 (pubk a)))))-  (label 7)-  (parent 5)-  (seen 9)+  (label 9)+  (parent 7)   (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton ns   (vars (n1 n1-0 n2 n2-0 text) (a b name))@@ -201,55 +232,12 @@       (send (enc n2 (pubk b))))     ((recv (enc n1-0 a (pubk b))) (send (enc n1-0 n2 (pubk a))))     ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))-  (label 8)-  (parent 7)-  (seen 6)+  (label 10)+  (parent 9)   (unrealized)   (shape)   (maps ((0 1) ((a a) (b b) (n1 n1) (n1-0 n1-0) (n2 n2-0) (n2-0 n2))))-  (origs (n1 (0 0)) (n1-0 (1 0)))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton ns-  (vars (n1 n2 n2-0 text) (a b name))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand resp 2 (n2 n2-0) (n1 n1) (b b) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig n1)-  (operation nonce-test (displaced 4 1 init 1) n1-0 (0 1)-    (enc n1-0 n2-0 (pubk a)) (enc n1-0 a (pubk b)))-  (traces-    ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))-      (send (enc n2 (pubk b))))-    ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a))))-    ((recv (enc n1 a (pubk b))) (send (enc n1 n2-0 (pubk a)))))-  (label 9)-  (parent 7)-  (seen 6)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton ns-  (vars (n1 n2 text) (a b name))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand resp 2 (n2 n2) (n1 n1) (b b) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b))-  (uniq-orig n1)-  (operation collapsed 1 0)-  (traces-    ((send (enc n1 a (pubk b))) (recv (enc n1 n2 (pubk a)))-      (send (enc n2 (pubk b))))-    ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a))))-    ((recv (enc n1 a (pubk b))) (send (enc n1 n2 (pubk a)))))-  (label 10)-  (parent 8)-  (seen 6)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n1 (0 0)) (n1-0 (1 0))))  (comment "Nothing left to do")
tst/nsl3.tst view
@@ -1,6 +1,6 @@ (herald "Three Party Needham-Schroeder-Lowe Protocol") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol nsl3 basic@@ -504,9 +504,8 @@           (pubk c)))))   (label 11)   (parent 10)-  (seen 13)   (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nsl3   (vars (na0 na1 nb0 nb1 nc0 nc1 nb0-0 nb1-0 nc0-0 nc1-0 text)@@ -569,10 +568,10 @@     ((2 1) (0 0)) ((2 3) (0 2)))   (non-orig (privk a) (privk b) (privk c))   (uniq-orig nc0 nc1 nb0 nb1 na0 na1)-  (operation nonce-test (added-strand mid 4) nc0 (0 2)-    (enc nb0 (enc nb1 nc0 c a (pubk b)) (enc nc1 (pubk c)) (pubk b))-    (enc na1 nc1 c b (enc na0 nb0 b c (pubk a))-      (enc nb1 nc0 c a (pubk b)) (pubk a)))+  (operation nonce-test (displaced 2 3 mid 4) nc0 (0 2)+    (enc na1-0 nc1 c b (enc na0-0 nb0 b c (pubk a))+      (enc nb1 nc0 c a (pubk b)) (pubk a))+    (enc nb0 (enc nb1 nc0 c a (pubk b)) (enc nc1 (pubk c)) (pubk b)))   (traces     ((recv        (enc nb1 b a (enc na1 a b (pubk c)) (enc na0 nb0 b c (pubk a))@@ -597,9 +596,8 @@           (pubk b))) (send (enc nc0 (enc nc1 (pubk c)) (pubk c)))))   (label 13)   (parent 11)-  (seen 15)   (unrealized (2 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nsl3   (vars (na0 na1 nc0 nc1 nb0 nb1 nc0-0 nc1-0 text) (a b c name))@@ -648,9 +646,8 @@           (enc nb1 nc0-0 c a (pubk b)) (pubk a)))))   (label 14)   (parent 12)-  (seen 16)   (unrealized (0 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nsl3   (vars (nc0 nc1 nb0 nb1 na0 na1 text) (a b c name))@@ -664,7 +661,7 @@     ((2 3) (0 2)))   (non-orig (privk a) (privk b) (privk c))   (uniq-orig nc0 nc1 nb0 nb1 na0 na1)-  (operation nonce-test (added-strand init 3) nc0 (2 2)+  (operation nonce-test (displaced 3 1 init 3) nc0 (2 2)     (enc na1 nc1 c b (enc na0 nb0 b c (pubk a))       (enc nb1 nc0 c a (pubk b)) (pubk a)))   (traces@@ -714,10 +711,10 @@     ((2 1) (0 0)) ((3 1) (2 0)) ((3 3) (0 2)))   (non-orig (privk a) (privk b) (privk c))   (uniq-orig nc0 nc1 nb0 nb1 nc0-0 nc1-0 na0 na1)-  (operation nonce-test (added-strand mid 4) nc0 (0 2)-    (enc nb0 (enc nb1 nc0 c a (pubk b)) (enc nc1 (pubk c)) (pubk b))-    (enc na1 nc1 c b (enc na0 nb0 b c (pubk a))-      (enc nb1 nc0 c a (pubk b)) (pubk a)))+  (operation nonce-test (displaced 2 4 mid 4) nc0 (0 2)+    (enc na1-0 nc1 c b (enc na0-0 nb0 b c (pubk a))+      (enc nb1 nc0 c a (pubk b)) (pubk a))+    (enc nb0 (enc nb1 nc0 c a (pubk b)) (enc nc1 (pubk c)) (pubk b)))   (traces     ((recv        (enc nb1 b a (enc na1 a b (pubk c)) (enc na0 nb0 b c (pubk a))@@ -748,9 +745,8 @@           (pubk b))) (send (enc nc0 (enc nc1 (pubk c)) (pubk c)))))   (label 16)   (parent 14)-  (seen 17)   (unrealized (3 2))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton nsl3   (vars (nc0 nc1 nb0 nb1 nc0-0 nc1-0 na0 na1 text) (a b c name))@@ -766,7 +762,7 @@     ((3 1) (2 0)) ((3 3) (0 2)))   (non-orig (privk a) (privk b) (privk c))   (uniq-orig nc0 nc1 nb0 nb1 nc0-0 nc1-0 na0 na1)-  (operation nonce-test (added-strand init 3) nc0 (3 2)+  (operation nonce-test (displaced 4 1 init 3) nc0 (3 2)     (enc na1 nc1 c b (enc na0 nb0 b c (pubk a))       (enc nb1 nc0 c a (pubk b)) (pubk a)))   (traces
tst/nsl4cm1.tst view
@@ -1,11969 +1,18810 @@ (herald "Four Party Needham-Schroeder-Lowe Protocol") -(comment "CPSA 2.2.8")-(comment "All input read")--(defprotocol nsl4cm basic-  (defrole init-    (vars (a b c d name) (na nb nc nd text))-    (trace (send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b)))))-  (defrole resp1-    (vars (a b c d name) (na nb nc nd text))-    (trace (recv (enc a c d na (pubk b)))-      (send (enc a b d na nb (pubk c))) (recv (enc nb nc nd (pubk b)))-      (send (enc nc nd (pubk c)))))-  (defrole resp2-    (vars (a b c d name) (na nb nc nd text))-    (trace (recv (enc a b d na nb (pubk c)))-      (send (enc a b c na nb nc (pubk d))) (recv (enc nc nd (pubk c)))-      (send (enc nd (pubk d)))))-  (defrole resp3-    (vars (a b c d name) (na nb nc nd text))-    (trace (recv (enc a b c na nb nc (pubk d)))-      (send (enc b c d na nb nc nd (pubk a)))-      (recv (enc nd (pubk d))))))--(defskeleton nsl4cm-  (vars (na nb nc nd text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b)))))-  (label 0)-  (unrealized (0 1))-  (origs (na (0 0)))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (0 1)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-0 (pubk c)))))-  (label 1)-  (parent 0)-  (unrealized (0 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp2 2) na (0 1)-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d)))))-  (label 2)-  (parent 1)-  (unrealized (0 1) (2 0))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (2 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-1 (pubk c)))))-  (label 3)-  (parent 2)-  (seen 4)-  (unrealized (0 1) (2 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 3 1 resp1 2) na (2 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d)))))-  (label 4)-  (parent 2)-  (unrealized (0 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 3 1 resp1 2) na (2 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))-  (label 5)-  (parent 2)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 4 1 resp1 2) na (2 0)-    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 6)-  (parent 3)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp2 2) na (2 0)-    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 7)-  (parent 3)-  (unrealized (0 1) (2 0) (4 0))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b d na nb-0 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))-  (label 8)-  (parent 4)-  (unrealized (0 1) (3 0))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 9)-  (parent 5)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 10)-  (parent 5)-  (seen 20)-  (unrealized (0 1) (3 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 11)-  (parent 6)-  (seen 27)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 12)-  (parent 6)-  (seen 32)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-2 (pubk c)))))-  (label 13)-  (parent 7)-  (seen 15)-  (unrealized (0 1) (2 0) (4 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 14)-  (parent 7)-  (unrealized (0 1) (4 0))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 15)-  (parent 7)-  (seen 39)-  (unrealized (0 1) (2 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 16)-  (parent 7)-  (seen 36)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))-  (label 17)-  (parent 7)-  (seen 46)-  (unrealized (0 1) (2 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (3 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-1 (pubk c)))))-  (label 18)-  (parent 8)-  (unrealized (0 1) (3 0))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 4 1 resp1 2) na (3 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))-  (label 19)-  (parent 8)-  (seen 21 56)-  (unrealized (0 1) (3 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 4 1 resp1 2) na (3 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 20)-  (parent 8)-  (seen 25 54)-  (unrealized (0 1) (3 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 4 2 resp2 2) na (3 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 21)-  (parent 8)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 22)-  (parent 9)-  (seen 64)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 23)-  (parent 9)-  (seen 24 68)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (3 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 24)-  (parent 10)-  (seen 54 60)-  (unrealized (0 1) (3 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 4 2 resp2 2) nb-0 (3 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 25)-  (parent 10)-  (seen 70)-  (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 26)-  (parent 11)-  (seen 28 41 76)-  (unrealized (0 1) (4 0))-  (comment "8 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 27)-  (parent 11)-  (seen 5 30 41 76)-  (unrealized (0 1) (4 0))-  (comment "7 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 28)-  (parent 11)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 29)-  (parent 11)-  (seen 9 10)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 30)-  (parent 11)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 31)-  (parent 12)-  (seen 88)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 32)-  (parent 12)-  (seen 35 88 91)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 33)-  (parent 12)-  (seen 35 60 93)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 34)-  (parent 12)-  (seen 54 59 60)-  (unrealized (0 1) (4 0))-  (comment "4 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 35)-  (parent 12)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) na (4 0)-    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 36)-  (parent 13)-  (seen 47)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 6 3 resp1 2) na (4 0)-    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c)))))-  (label 37)-  (parent 13)-  (seen 41 100)-  (unrealized (0 1) (2 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp2 2) na (4 0)-    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))-    ((recv (enc a b d na nb-2 (pubk c)))-      (send (enc a b c na nb-2 nc-2 (pubk d)))))-  (label 38)-  (parent 13)-  (unrealized (0 1) (2 0) (4 0) (6 0))-  (comment "7 in cohort - 7 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (contracted (nb-1 nb-0)) na (4 0)-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-1 (pubk d)))))-  (label 39)-  (parent 14)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 40)-  (parent 14)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))-  (label 41)-  (parent 14)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp2 2) na (4 0)-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-2 (pubk d)))))-  (label 42)-  (parent 14)-  (unrealized (0 1) (4 0) (5 0))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 5 1 resp1 2) na (2 0)-    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 43)-  (parent 15)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) na (2 0)-    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 44)-  (parent 15)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (2 0)-    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-1 nc-1 (pubk d)))-      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))-  (label 45)-  (parent 15)-  (unrealized (0 1) (2 0) (5 0))-  (comment "6 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (contracted (nb-1 nb-0)) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 46)-  (parent 16)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 47)-  (parent 16)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)-    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 48)-  (parent 16)-  (seen 136 137 138)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 49)-  (parent 16)-  (seen 124)-  (unrealized (0 1) (4 0) (5 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp1 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c)))))-  (label 50)-  (parent 17)-  (seen 51)-  (unrealized (0 1) (2 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 5 1 resp1 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))-  (label 51)-  (parent 17)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 52)-  (parent 17)-  (seen 136 137 138)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 53)-  (parent 17)-  (seen 134)-  (unrealized (0 1) (2 0) (5 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) na (3 0)-    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 54)-  (parent 18)-  (seen 60 72)-  (unrealized (0 1) (3 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp2 2) na (3 0)-    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 55)-  (parent 18)-  (unrealized (0 1) (3 0) (5 0))-  (comment "6 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 5 2 resp2 2) na (3 0)-    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))-  (label 56)-  (parent 18)-  (unrealized (0 1))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) na (3 0)-    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 57)-  (parent 18)-  (seen 61 62)-  (unrealized (0 1))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp2 2) na (3 0)-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-1 (pubk d)))))-  (label 58)-  (parent 19)-  (unrealized (0 1) (3 0) (4 0))-  (comment "4 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 59)-  (parent 20)-  (seen 167)-  (unrealized (0 1) (3 0) (4 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 4 2 resp2 2) nb-0 (3 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 60)-  (parent 20)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd text) (a b c d name))-  (defstrand init 3 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc) (nb nb) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc)-  (operation nonce-test (contracted (nb-0 nb) (nc-0 nc) (nd-0 nd)) nc-    (0 1) (enc a b c nc nb nc (pubk d)) (enc a b d nc nb (pubk c))-    (enc a c d nc (pubk b)) (enc b c d nc nb nc nd (pubk a)))-  (traces-    ((send (enc a c d nc (pubk b)))-      (recv (enc b c d nc nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))-    ((recv (enc a b d nc nb (pubk c)))-      (send (enc a b c nc nb nc (pubk d))))-    ((recv (enc a b c nc nb nc (pubk d)))-      (send (enc b c d nc nb nc nd (pubk a)))))-  (label 61)-  (parent 21)-  (seen 163)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))-    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 62)-  (parent 21)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 63)-  (parent 22)-  (seen 17 65 178)-  (unrealized (0 1) (4 0))-  (comment "8 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 64)-  (parent 22)-  (seen 5 17 29 67 178)-  (unrealized (0 1) (4 0))-  (comment "7 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 65)-  (parent 22)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 66)-  (parent 22)-  (seen 187)-  (unrealized (0 1))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 67)-  (parent 22)-  (seen 181)-  (unrealized (0 1) (4 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 68)-  (parent 23)-  (seen 54 70 172)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 69)-  (parent 23)-  (seen 60)-  (unrealized (0 1) (4 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 70)-  (parent 23)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 71)-  (parent 24)-  (seen 160)-  (unrealized (0 1) (3 0) (5 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nb-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (3 0)-    (enc a b d nb-1 nb-0 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c)))))-  (label 72)-  (parent 24)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nc nd text) (a b c d name))-  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc)-  (operation nonce-test (contracted (nb nc) (nc-0 nc) (nd-0 nd)) nc-    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))-    (enc a c d nc (pubk b)) (enc b c d nc nc nc nd (pubk a)))-  (traces-    ((send (enc a c d nc (pubk b)))-      (recv (enc b c d nc nc nc nd (pubk a)))-      (send (enc nc nc nd (pubk b))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))-    ((recv (enc a b d nc nc (pubk c)))-      (send (enc a b c nc nc nc (pubk d))))-    ((recv (enc a b c nc nc nc (pubk d)))-      (send (enc b c d nc nc nc nd (pubk a)))))-  (label 73)-  (parent 25)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (c c) (d d) (na nc) (nb nc) (nc nc) (nd nd))))-  (origs (nc (0 0))))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 74)-  (parent 25)-  (seen 175)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (contracted (nb-2 nb-1)) nb-0 (4 0)-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 75)-  (parent 26)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 76)-  (parent 26)-  (seen 6 41 79 80)-  (unrealized (0 1) (4 0))-  (comment "9 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 77)-  (parent 26)-  (seen 11 12)-  (unrealized (0 1))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 78)-  (parent 26)-  (seen 218)-  (unrealized (0 1) (4 0) (6 0))-  (comment "8 in cohort - 7 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-2 (4 0)-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 79)-  (parent 26)-  (seen 85 86 87)-  (unrealized (0 1))-  (comment "4 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 80)-  (parent 27)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)-    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 81)-  (parent 27)-  (seen 9 10)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 82)-  (parent 27)-  (seen 228)-  (unrealized (0 1) (4 0) (5 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 83)-  (parent 28)-  (seen 233)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 84)-  (parent 28)-  (seen 239)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d))-    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))-  (label 85)-  (parent 30)-  (seen 245)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d))-    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 86)-  (parent 30)-  (seen 251)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d))-    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 87)-  (parent 30)-  (seen 257)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 88)-  (parent 31)-  (seen 91 92)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 89)-  (parent 31)-  (seen 60 154 155 156)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))-  (label 90)-  (parent 31)-  (seen 266)-  (unrealized (0 1) (4 0) (6 0))-  (comment "8 in cohort - 7 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 91)-  (parent 31)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-2 (4 0)-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 92)-  (parent 31)-  (seen 97 98 99)-  (unrealized (0 1))-  (comment "4 in cohort - 1 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 93)-  (parent 32)-  (seen 35 60 91)-  (unrealized (0 1) (4 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 94)-  (parent 32)-  (seen 278)-  (unrealized (0 1) (4 0) (5 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 95)-  (parent 33)-  (seen 283)-  (unrealized (0 1) (4 0) (5 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 96)-  (parent 34)-  (seen 70 73 74)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nc nb nd text) (a b c d name))-  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc)-  (operation nonce-test (contracted (nb-0 nc) (nc-0 nc) (nd-0 nd)) nc-    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))-    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))-    (enc b c d nc nc nc nd (pubk a)))-  (traces-    ((send (enc a c d nc (pubk b)))-      (recv (enc b c d nc nc nc nd (pubk a)))-      (send (enc nc nc nd (pubk b))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))-    ((recv (enc a b d nc nc (pubk c)))-      (send (enc a b c nc nc nc (pubk d))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))-    ((recv (enc a b c nc nc nc (pubk d)))-      (send (enc b c d nc nc nc nd (pubk a)))))-  (label 97)-  (parent 35)-  (seen 73)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 98)-  (parent 35)-  (seen 288)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 6 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 99)-  (parent 35)-  (seen 236 254 290 294)-  (unrealized (0 1) (5 0))-  (comment "7 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (contracted (nb-2 nb-0)) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 100)-  (parent 36)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)-    (enc a b d nb-2 nb-2 (pubk c)) (enc a b d nb-2 nb-1 (pubk c))-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 101)-  (parent 36)-  (seen 296 297 298)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 102)-  (parent 36)-  (seen 141 142 299)-  (unrealized (0 1) (4 0) (6 0))-  (comment "7 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 103)-  (parent 36)-  (seen 112 301)-  (unrealized (0 1) (4 0) (6 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c)))))-  (label 104)-  (parent 37)-  (unrealized (0 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-2 (2 0)-    (enc a b c nb-2 nb-2 nc-1 (pubk d)) (enc a b d nb-2 nb-2 (pubk c))-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 105)-  (parent 37)-  (seen 296 297 298)-  (unrealized (0 1))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp2 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 106)-  (parent 37)-  (seen 311)-  (unrealized (0 1) (2 0) (6 0))-  (comment "8 in cohort - 7 not yet seen"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 107)-  (parent 37)-  (seen 318)-  (unrealized (0 1) (2 0) (6 0))-  (comment "8 in cohort - 7 not yet seen"))--(comment "Strand bound exceeded--aborting run")--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)-    (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-3) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))-    ((recv (enc a b d na nb-2 (pubk c)))-      (send (enc a b c na nb-2 nc-2 (pubk d))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-3 (pubk c)))))-  (label 108)-  (parent 38)-  (unrealized (0 1) (2 0) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 7 1 resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))-    ((recv (enc a b d na nb-2 (pubk c)))-      (send (enc a b c na nb-2 nc-2 (pubk d)))))-  (label 109)-  (parent 38)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 7 3 resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))-    ((recv (enc a b d na nb-2 (pubk c)))-      (send (enc a b c na nb-2 nc-2 (pubk d)))))-  (label 110)-  (parent 38)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))-    ((recv (enc a b d na nb-2 (pubk c)))-      (send (enc a b c na nb-2 nc-2 (pubk d)))))-  (label 111)-  (parent 38)-  (unrealized (0 1) (2 0) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 1 resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 112)-  (parent 38)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 3 resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 113)-  (parent 38)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-2) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-2) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-2) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-2) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-2) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-2) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-2) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-2)-  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-2 (pubk b)))-      (recv (enc b c d nb-2 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-2 (pubk b)))-      (send (enc a b d nb-2 nb-0 (pubk c))))-    ((recv (enc a b d nb-2 nb-0 (pubk c)))-      (send (enc a b c nb-2 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-2 (pubk b)))-      (send (enc a b d nb-2 nb-1 (pubk c))))-    ((recv (enc a b d nb-2 nb-1 (pubk c)))-      (send (enc a b c nb-2 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-2 (pubk b)))-      (send (enc a b d nb-2 nb-2 (pubk c))))-    ((recv (enc a b d nb-2 nb-2 (pubk c)))-      (send (enc a b c nb-2 nb-2 nc-2 (pubk d)))))-  (label 114)-  (parent 38)-  (unrealized (0 1) (2 0) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-0 nc-1 (pubk d))-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-1 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))-  (label 115)-  (parent 39)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-0 nc-1 (pubk d))-    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-1 (pubk d))))-    ((recv (enc a b c na nb-0 nc-1 (pubk d)))-      (send (enc b c d na nb-0 nc-1 nd-0 (pubk a)))))-  (label 116)-  (parent 39)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))-    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))-  (label 117)-  (parent 40)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))-    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-1 nc-1 (pubk d)))-      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))-  (label 118)-  (parent 40)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))-  (label 119)-  (parent 41)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 120)-  (parent 41)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-2 (pubk d))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-2 (pubk c)))))-  (label 121)-  (parent 42)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-2 (pubk d)))))-  (label 122)-  (parent 42)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-2 (pubk d)))))-  (label 123)-  (parent 42)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 124)-  (parent 42)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-2 (pubk d)))))-  (label 125)-  (parent 42)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))-    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))-  (label 126)-  (parent 43)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp3 2) na (0 1)-    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))-    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-1 nc-1 (pubk d)))-      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))-  (label 127)-  (parent 43)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 128)-  (parent 44)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 129)-  (parent 44)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-1 nc-1 (pubk d)))-      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-2 (pubk c)))))-  (label 130)-  (parent 45)-  (unrealized (0 1) (2 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-1 nc-1 (pubk d)))-      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))-  (label 131)-  (parent 45)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a b c na nb-1 nc-1 (pubk d)))-      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))-  (label 132)-  (parent 45)-  (unrealized (0 1) (2 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 133)-  (parent 45)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 134)-  (parent 45)-  (unrealized (0 1) (2 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-1)-  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nc-1 (pubk b)))-      (recv (enc b c d nc-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-0 (pubk c))))-    ((recv (enc a b d nc-1 nb-0 (pubk c)))-      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-1 (pubk c))))-    ((recv (enc a b d nc-1 nb-1 (pubk c)))-      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 135)-  (parent 45)-  (unrealized (0 1) (2 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 136)-  (parent 46)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 137)-  (parent 46)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 138)-  (parent 46)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 139)-  (parent 47)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 140)-  (parent 47)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 141)-  (parent 49)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 142)-  (parent 49)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 143)-  (parent 49)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (3 0))-    ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (contracted (nb-2 nb-0)) nb-0 (2 0)-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 144)-  (parent 50)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-2 (2 0)-    (enc a b c nb-2 nb-2 nc-1 (pubk d)) (enc a b d nb-2 nb-2 (pubk c))-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 145)-  (parent 50)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (2 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp2 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 146)-  (parent 50)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (2 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (2 0)-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))-    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 147)-  (parent 50)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))-  (label 148)-  (parent 51)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 149)-  (parent 51)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c)))))-  (label 150)-  (parent 53)-  (unrealized (0 1) (2 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 151)-  (parent 53)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 152)-  (parent 53)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-1)-  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-1 (pubk b)))-      (recv (enc b c d nc-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-0 (pubk c))))-    ((recv (enc a b d nc-1 nb-0 (pubk c)))-      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nc-1 (pubk c))))-    ((recv (enc a b d nc-1 nc-1 (pubk c)))-      (send (enc a b c nc-1 nc-1 nc-1 (pubk d))))-    ((recv (enc a b c nc-1 nc-1 nc-1 (pubk d)))-      (send (enc b c d nc-1 nc-1 nc-1 nd-0 (pubk a)))))-  (label 153)-  (parent 53)-  (unrealized (0 1) (2 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))-    ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 154)-  (parent 54)-  (unrealized (0 1) (3 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (3 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 155)-  (parent 54)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))-    ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 156)-  (parent 54)-  (unrealized (0 1) (3 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-2 (pubk c)))))-  (label 157)-  (parent 55)-  (unrealized (0 1) (3 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 158)-  (parent 55)-  (unrealized (0 1) (3 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 6 4 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))-    ((recv (enc a b d na nb-1 (pubk c)))-      (send (enc a b c na nb-1 nc-1 (pubk d)))))-  (label 159)-  (parent 55)-  (unrealized (0 1) (3 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 160)-  (parent 55)-  (unrealized (0 1) (3 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 6 4 resp1 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))-  (label 161)-  (parent 55)-  (unrealized (0 1) (3 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c))))-    ((recv (enc a b d nc-0 nb-1 (pubk c)))-      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))-  (label 162)-  (parent 55)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (contracted (nb-0 nb) (nc-0 nc) (nd-0 nd)) na-    (0 1) (enc a b c na nb nc (pubk d)) (enc a b d na nb (pubk c))-    (enc a c d na (pubk b)) (enc b c d na nb nc nd (pubk a)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb (pubk c))))-    ((recv (enc a b d na nb (pubk c)))-      (send (enc a b c na nb nc (pubk d))))-    ((recv (enc a b c na nb nc (pubk d)))-      (send (enc b c d na nb nc nd (pubk a)))))-  (label 163)-  (parent 56)-  (unrealized)-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))-    (enc a b d nc-0 nb-1 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c))))-    ((recv (enc a b d nc-0 nb-1 (pubk c)))-      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))-  (label 164)-  (parent 57)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (added-strand resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-1 (pubk d))))-    ((recv (enc a c d na (pubk b)))-      (send (enc a b d na nb-1 (pubk c)))))-  (label 165)-  (parent 58)-  (unrealized (0 1) (3 0) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig na)-  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d na (pubk b)))-      (recv (enc b c d na nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-0 (pubk d))))-    ((recv (enc a b c na nb-0 nc-0 (pubk d)))-      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d na nb-0 (pubk c)))-      (send (enc a b c na nb-0 nc-1 (pubk d)))))-  (label 166)-  (parent 58)-  (unrealized (0 1) (3 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 167)-  (parent 58)-  (unrealized (0 1) (3 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))-    ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) na (4 0)-    (enc a c d na (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 168)-  (parent 58)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 169)-  (parent 59)-  (unrealized (0 1) (3 0) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))-    ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 170)-  (parent 59)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd text) (a b c d name))-  (defstrand init 3 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb)-  (operation nonce-test (contracted (nb-0 nb) (nc-0 nc) (nd-0 nd)) nb-    (0 1) (enc a b c nb nb nc (pubk d)) (enc a b d nb nb (pubk c))-    (enc a c d nb (pubk b)) (enc b c d nb nb nc nd (pubk a)))-  (traces-    ((send (enc a c d nb (pubk b)))-      (recv (enc b c d nb nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))-    ((recv (enc a b d nb nb (pubk c)))-      (send (enc a b c nb nb nc (pubk d))))-    ((recv (enc a b c nb nb nc (pubk d)))-      (send (enc b c d nb nb nc nd (pubk a)))))-  (label 171)-  (parent 60)-  (unrealized)-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)) (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 172)-  (parent 60)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (4 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 173)-  (parent 62)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 1 resp1 2) nc-0 (4 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 174)-  (parent 62)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 1 resp1 2) nc-1 (4 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))-  (label 175)-  (parent 62)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nc-0 (4 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 176)-  (parent 62)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nd-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (4 0))-    ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nd-0)-  (operation nonce-test (displaced 5 3 resp3 2) nc-1 (4 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nd-0 (pubk b)))-      (recv (enc b c d nd-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nd-0 (pubk b)))-      (send (enc a b d nd-0 nb-0 (pubk c))))-    ((recv (enc a b d nd-0 nb-0 (pubk c)))-      (send (enc a b c nd-0 nb-0 nd-0 (pubk d))))-    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))-      (send (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a))))-    ((recv (enc a b d nd-0 nb-0 (pubk c)))-      (send (enc a b c nd-0 nb-0 nc-0 (pubk d)))))-  (label 177)-  (parent 62)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 178)-  (parent 63)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 179)-  (parent 63)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 180)-  (parent 63)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-2 (4 0)-    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 181)-  (parent 63)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 182)-  (parent 64)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 183)-  (parent 64)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 184)-  (parent 65)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 185)-  (parent 65)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 186)-  (parent 66)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 187)-  (parent 66)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (contracted (nb-0 nc-0)) nc-0 (4 0)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 188)-  (parent 67)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 3 resp1 2) nc-0 (4 0)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 189)-  (parent 67)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 5 3 resp1 2) nc-1 (4 0)-    (enc a b c nc-1 nc-1 nc-1 (pubk d)) (enc a b d nc-1 nc-1 (pubk c))-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))-  (label 190)-  (parent 67)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (4 0)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))-  (label 191)-  (parent 67)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp3 2) nc-0 (4 0)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 192)-  (parent 67)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 193)-  (parent 68)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 194)-  (parent 69)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 195)-  (parent 69)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (4 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 196)-  (parent 69)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nc nb nd text) (a b c d name))-  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc)-  (operation nonce-test (contracted (nb-0 nc) (nc-0 nc) (nd-0 nd)) nc-    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))-    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))-    (enc b c d nc nc nc nd (pubk a)))-  (traces-    ((send (enc a c d nc (pubk b)))-      (recv (enc b c d nc nc nc nd (pubk a)))-      (send (enc nc nc nd (pubk b))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))-    ((recv (enc a b d nc nc (pubk c)))-      (send (enc a b c nc nc nc (pubk d))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))-    ((recv (enc a b c nc nc nc (pubk d)))-      (send (enc b c d nc nc nc nd (pubk a)))))-  (label 197)-  (parent 70)-  (unrealized)-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 198)-  (parent 70)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 199)-  (parent 70)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 200)-  (parent 71)-  (unrealized (0 1) (3 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 4 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 201)-  (parent 71)-  (unrealized (0 1) (3 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 4 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 202)-  (parent 71)-  (unrealized (0 1) (3 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 203)-  (parent 71)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nc nd nb text) (a b c d name))-  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (3 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc)-  (operation nonce-test (contracted (nb-0 nc) (nc-0 nc) (nd-0 nd)) nc-    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))-    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))-    (enc b c d nc nc nc nd (pubk a)))-  (traces-    ((send (enc a c d nc (pubk b)))-      (recv (enc b c d nc nc nc nd (pubk a)))-      (send (enc nc nc nd (pubk b))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))-    ((recv (enc a b d nc nc (pubk c)))-      (send (enc a b c nc nc nc (pubk d))))-    ((recv (enc a b c nc nc nc (pubk d)))-      (send (enc b c d nc nc nc nd (pubk a))))-    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c)))))-  (label 204)-  (parent 72)-  (unrealized)-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 205)-  (parent 72)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))-    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 206)-  (parent 72)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nc-1 nb-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))-    ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (4 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c)))))-  (label 207)-  (parent 74)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((2 1) (4 0))-    ((3 1) (0 1)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 5 2 resp2 2) nc-0 (4 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 208)-  (parent 74)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nd-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nd-0) (nb nd-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nd-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nd-0) (nb nd-0) (nc nd-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (4 0))-    ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nd-0)-  (operation nonce-test (displaced 5 3 resp3 2) nc-1 (4 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nd-0 (pubk b)))-      (recv (enc b c d nd-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nd-0 (pubk b)))-      (send (enc a b d nd-0 nd-0 (pubk c))))-    ((recv (enc a b d nd-0 nd-0 (pubk c)))-      (send (enc a b c nd-0 nd-0 nd-0 (pubk d))))-    ((recv (enc a b c nd-0 nd-0 nd-0 (pubk d)))-      (send (enc b c d nd-0 nd-0 nd-0 nd-0 (pubk a))))-    ((recv (enc a b d nd-0 nd-0 (pubk c)))-      (send (enc a b c nd-0 nd-0 nc-0 (pubk d)))))-  (label 209)-  (parent 74)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 210)-  (parent 75)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 211)-  (parent 75)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (contracted (nb-2 nb-1)) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 212)-  (parent 76)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))-    ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)-    (enc a b d nb-2 nb-2 (pubk c)) (enc a b d nb-2 nb-1 (pubk c))-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c)))))-  (label 213)-  (parent 76)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))-    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 214)-  (parent 76)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))-    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 215)-  (parent 76)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 216)-  (parent 77)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)-    (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-3) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-3 (pubk c)))))-  (label 217)-  (parent 78)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (6 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 1 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 218)-  (parent 78)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 219)-  (parent 78)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 5 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 220)-  (parent 78)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))-  (label 221)-  (parent 78)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))-  (label 222)-  (parent 78)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 7 2 resp2 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c))))-    ((recv (enc a b d nc-0 nb-1 (pubk c)))-      (send (enc a b c nc-0 nb-1 nc-2 (pubk d)))))-  (label 223)-  (parent 78)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d))-    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a b d nc-0 nb-1 (pubk c))-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c))))-    ((recv (enc a b d nc-0 nb-1 (pubk c)))-      (send (enc a b c nc-0 nb-1 nc-2 (pubk d)))))-  (label 224)-  (parent 79)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))-    ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 225)-  (parent 80)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))-    ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 226)-  (parent 80)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 227)-  (parent 82)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 228)-  (parent 82)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 229)-  (parent 82)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 230)-  (parent 82)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))-  (label 231)-  (parent 82)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (0 1)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 232)-  (parent 83)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 233)-  (parent 83)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 234)-  (parent 83)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 235)-  (parent 83)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 236)-  (parent 83)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-1)-  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-1 (pubk b)))-      (recv (enc b c d nc-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nc-1 (pubk c))))-    ((recv (enc a b d nc-1 nc-1 (pubk c)))-      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-0 (pubk c))))-    ((recv (enc a b d nc-1 nb-0 (pubk c)))-      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-1 nc-1 nc-0 (pubk d)))-      (send (enc b c d nc-1 nc-1 nc-0 nd-0 (pubk a)))))-  (label 237)-  (parent 83)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (0 1)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 238)-  (parent 84)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 239)-  (parent 84)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))-  (label 240)-  (parent 84)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 241)-  (parent 84)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 242)-  (parent 84)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-1)-  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-1 (pubk b)))-      (recv (enc b c d nc-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nc-1 (pubk c))))-    ((recv (enc a b d nc-1 nc-1 (pubk c)))-      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-0 (pubk c))))-    ((recv (enc a b d nc-1 nb-0 (pubk c)))-      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-1 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-1 nb-0 nc-1 nd-0 (pubk a)))))-  (label 243)-  (parent 84)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 244)-  (parent 85)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))-  (label 245)-  (parent 85)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))-  (label 246)-  (parent 85)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-2 (5 0)-    (enc a c d nc-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 247)-  (parent 85)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))-  (label 248)-  (parent 85)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 4 resp2 2) nc-2 (5 0)-    (enc a c d nc-2 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 249)-  (parent 85)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 250)-  (parent 86)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 251)-  (parent 86)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 252)-  (parent 86)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a)))))-  (label 253)-  (parent 86)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 254)-  (parent 86)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 4 resp2 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))-  (label 255)-  (parent 86)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 256)-  (parent 87)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 257)-  (parent 87)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 258)-  (parent 87)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 259)-  (parent 87)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 260)-  (parent 87)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 4 resp2 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 261)-  (parent 87)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))-    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 262)-  (parent 88)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))-    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))-  (label 263)-  (parent 88)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nd-0 nb-0 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (4 0)-    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c)))))-  (label 264)-  (parent 89)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 nb-3 text)-    (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-3) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-3 (pubk c)))))-  (label 265)-  (parent 90)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (6 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 1 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))-  (label 266)-  (parent 90)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))-  (label 267)-  (parent 90)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 5 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))-  (label 268)-  (parent 90)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 269)-  (parent 90)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-0 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))-  (label 270)-  (parent 90)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 7 2 resp2 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c))))-    ((recv (enc a b d nc-0 nb-1 (pubk c)))-      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))-  (label 271)-  (parent 90)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nb-0 nd text) (a b c d name))-  (defstrand init 3 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))-  (defstrand resp1 2 (na nb) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb)-  (operation nonce-test (contracted (nb-1 nb) (nc-0 nc) (nd-0 nd)) nb-    (0 1) (enc a b c nb nb nc (pubk d)) (enc a b d nb nb (pubk c))-    (enc a b d nb nb-0 (pubk c)) (enc a c d nb (pubk b))-    (enc b c d nb nb nc nd (pubk a)))-  (traces-    ((send (enc a c d nb (pubk b)))-      (recv (enc b c d nb nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))-    ((recv (enc a b d nb nb (pubk c)))-      (send (enc a b c nb nb nc (pubk d))))-    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb-0 (pubk c))))-    ((recv (enc a b c nb nb nc (pubk d)))-      (send (enc b c d nb nb nc nd (pubk a)))))-  (label 272)-  (parent 91)-  (unrealized)-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b))-    (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 273)-  (parent 91)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)-    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))-    (enc a b d nc-0 nb-0 (pubk c)) (enc a b d nc-0 nb-1 (pubk c))-    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c))))-    ((recv (enc a b d nc-0 nb-1 (pubk c)))-      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))-  (label 274)-  (parent 92)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))-    ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 275)-  (parent 93)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))-    ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)-    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 276)-  (parent 93)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 277)-  (parent 94)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 278)-  (parent 94)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 279)-  (parent 94)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 280)-  (parent 94)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 281)-  (parent 94)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 nb-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (4 0)) ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c)))))-  (label 282)-  (parent 95)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))-    ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 283)-  (parent 95)-  (unrealized (0 1) (4 0) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))-  (label 284)-  (parent 95)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))-  (label 285)-  (parent 95)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))-    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 286)-  (parent 95)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 287)-  (parent 98)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 288)-  (parent 98)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 289)-  (parent 98)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 6 3 resp1 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))-  (label 290)-  (parent 98)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))-  (label 291)-  (parent 98)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nd-0) (nb nd-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nd-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nd-0) (nb nd-0) (nc nd-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nd-0)-  (operation nonce-test (displaced 6 4 resp3 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nd-0 (pubk b)))-      (recv (enc b c d nd-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nd-0 (pubk b)))-      (send (enc a b d nd-0 nd-0 (pubk c))))-    ((recv (enc a b d nd-0 nd-0 (pubk c)))-      (send (enc a b c nd-0 nd-0 nd-0 (pubk d))))-    ((recv (enc a c d nd-0 (pubk b)))-      (send (enc a b d nd-0 nb-0 (pubk c))))-    ((recv (enc a b c nd-0 nd-0 nd-0 (pubk d)))-      (send (enc b c d nd-0 nd-0 nd-0 nd-0 (pubk a))))-    ((recv (enc a b d nd-0 nd-0 (pubk c)))-      (send (enc a b c nd-0 nd-0 nc-0 (pubk d)))))-  (label 292)-  (parent 98)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 nb-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))-    ((6 1) (5 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-1 (pubk c)))))-  (label 293)-  (parent 99)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))-  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))-    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-0)-  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)-    (enc a c d nc-0 (pubk b)))-  (traces-    ((send (enc a c d nc-0 (pubk b)))-      (recv (enc b c d nc-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nc-0 (pubk c))))-    ((recv (enc a b d nc-0 nc-0 (pubk c)))-      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-0 (pubk b)))-      (send (enc a b d nc-0 nb-0 (pubk c))))-    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))-      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))-    ((recv (enc a b d nc-0 nb-0 (pubk c)))-      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))-  (label 294)-  (parent 99)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))-  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nd-0) (nb nd-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nd-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nd-0) (nb nd-0) (nc nd-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))-    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nd-0)-  (operation nonce-test (displaced 6 4 resp3 2) nc-1 (5 0)-    (enc a c d nc-1 (pubk b)))-  (traces-    ((send (enc a c d nd-0 (pubk b)))-      (recv (enc b c d nd-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nd-0 (pubk b)))-      (send (enc a b d nd-0 nd-0 (pubk c))))-    ((recv (enc a b d nd-0 nd-0 (pubk c)))-      (send (enc a b c nd-0 nd-0 nd-0 (pubk d))))-    ((recv (enc a c d nd-0 (pubk b)))-      (send (enc a b d nd-0 nb-0 (pubk c))))-    ((recv (enc a b c nd-0 nd-0 nd-0 (pubk d)))-      (send (enc b c d nd-0 nd-0 nd-0 nd-0 (pubk a))))-    ((recv (enc a b d nd-0 nb-0 (pubk c)))-      (send (enc a b c nd-0 nb-0 nc-0 (pubk d)))))-  (label 295)-  (parent 99)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))-  (label 296)-  (parent 100)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))-  (label 297)-  (parent 100)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (3 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)-    (enc a b c nb-0 nb-0 nc-0 (pubk d))-    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))-    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 298)-  (parent 100)-  (unrealized (0 1) (5 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 1 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 299)-  (parent 102)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))-  (label 300)-  (parent 102)-  (unrealized (0 1))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))-  (label 301)-  (parent 102)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)-    (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-3) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))-    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (added-strand resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-3 (pubk c)))))-  (label 302)-  (parent 103)-  (unrealized (0 1) (4 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 303)-  (parent 103)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 5 resp1 2) nb-0 (6 0)-    (enc a c d nb-0 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-2 (pubk c))))-    ((recv (enc a b d nb-0 nb-2 (pubk c)))-      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))-  (label 304)-  (parent 103)-  (unrealized (0 1) (4 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))-    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (4 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))-  (label 305)-  (parent 103)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp2 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-2 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 306)-  (parent 104)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-2 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))-      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))-  (label 307)-  (parent 104)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))-    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (0 1)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)-    (enc a b c nb-1 nb-0 nc-0 (pubk d))-    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))-    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-2 (pubk c))-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 308)-  (parent 104)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)-    (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-3) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (2 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-3 (pubk c)))))-  (label 309)-  (parent 106)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 1 resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 310)-  (parent 106)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 3 resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 311)-  (parent 106)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((5 1) (6 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b d nb-1 nb-2 (pubk c)))-      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))-  (label 312)-  (parent 106)-  (unrealized (0 1) (2 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 1 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b d nb-0 nb-1 (pubk c)))-      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))-  (label 313)-  (parent 106)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((5 1) (6 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))-  (label 314)-  (parent 106)-  (unrealized (0 1) (2 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))-  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)-    (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (4 0))-    ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-1)-  (operation nonce-test (displaced 7 4 resp2 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-1 (pubk b)))-      (recv (enc b c d nc-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-0 (pubk c))))-    ((recv (enc a b d nc-1 nb-0 (pubk c)))-      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nc-1 (pubk c))))-    ((recv (enc a b d nc-1 nc-1 (pubk c)))-      (send (enc a b c nc-1 nc-1 nc-1 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-1 (pubk c))))-    ((recv (enc a b d nc-1 nb-1 (pubk c)))-      (send (enc a b c nc-1 nb-1 nc-2 (pubk d)))))-  (label 315)-  (parent 106)-  (unrealized (0 1) (2 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 nb-3 text)-    (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-3) (a a) (b b) (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (2 0)) ((7 1) (6 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (added-strand resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-3 (pubk c)))))-  (label 316)-  (parent 107)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 1 resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 317)-  (parent 107)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0))-    ((5 1) (4 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 3 resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 318)-  (parent 107)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((5 1) (6 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-1 (6 0)-    (enc a c d nb-1 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-2 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 319)-  (parent 107)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-0)-  (operation nonce-test (displaced 7 1 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-0 (pubk b)))-      (recv (enc b c d nb-0 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-0 (pubk c))))-    ((recv (enc a b d nb-0 nb-0 (pubk c)))-      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))-    ((recv (enc a c d nb-0 (pubk b)))-      (send (enc a b d nb-0 nb-1 (pubk c))))-    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))-      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))-  (label 320)-  (parent 107)-  (unrealized (0 1) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))-    ((5 1) (6 0)) ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nb-1)-  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nb-1 (pubk b)))-      (recv (enc b c d nb-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-0 (pubk c))))-    ((recv (enc a b d nb-1 nb-0 (pubk c)))-      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b d nb-1 nb-1 (pubk c)))-      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))-    ((recv (enc a c d nb-1 (pubk b)))-      (send (enc a b d nb-1 nb-1 (pubk c))))-    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))-      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))-  (label 321)-  (parent 107)-  (unrealized (0 1) (2 0) (6 0))-  (comment "aborted"))--(defskeleton nsl4cm-  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))-  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))-  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-1) (a a) (b b) (c c)-    (d d))-  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))-  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-1) (nd nd-0) (a a) (b b)-    (c c) (d d))-  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (4 0))-    ((6 1) (2 0)))-  (non-orig (privk a) (privk b) (privk c) (privk d))-  (uniq-orig nc-1)-  (operation nonce-test (displaced 7 4 resp2 2) nb-2 (6 0)-    (enc a c d nb-2 (pubk b)))-  (traces-    ((send (enc a c d nc-1 (pubk b)))-      (recv (enc b c d nc-1 nb nc nd (pubk a)))-      (send (enc nb nc nd (pubk b))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-0 (pubk c))))-    ((recv (enc a b d nc-1 nb-0 (pubk c)))-      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nc-1 (pubk c))))-    ((recv (enc a b d nc-1 nc-1 (pubk c)))-      (send (enc a b c nc-1 nc-1 nc-1 (pubk d))))-    ((recv (enc a c d nc-1 (pubk b)))-      (send (enc a b d nc-1 nb-1 (pubk c))))-    ((recv (enc a b c nc-1 nc-1 nc-1 (pubk d)))-      (send (enc b c d nc-1 nc-1 nc-1 nd-0 (pubk a)))))-  (label 322)-  (parent 107)-  (unrealized (0 1) (2 0))+(comment "CPSA 2.2.9")+(comment "All input read")++(defprotocol nsl4cm basic+  (defrole init+    (vars (a b c d name) (na nb nc nd text))+    (trace (send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b)))))+  (defrole resp1+    (vars (a b c d name) (na nb nc nd text))+    (trace (recv (enc a c d na (pubk b)))+      (send (enc a b d na nb (pubk c))) (recv (enc nb nc nd (pubk b)))+      (send (enc nc nd (pubk c)))))+  (defrole resp2+    (vars (a b c d name) (na nb nc nd text))+    (trace (recv (enc a b d na nb (pubk c)))+      (send (enc a b c na nb nc (pubk d))) (recv (enc nc nd (pubk c)))+      (send (enc nd (pubk d)))))+  (defrole resp3+    (vars (a b c d name) (na nb nc nd text))+    (trace (recv (enc a b c na nb nc (pubk d)))+      (send (enc b c d na nb nc nd (pubk a)))+      (recv (enc nd (pubk d))))))++(defskeleton nsl4cm+  (vars (na nb nc nd text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b)))))+  (label 0)+  (unrealized (0 1))+  (origs (na (0 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (0 1)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-0 (pubk c)))))+  (label 1)+  (parent 0)+  (unrealized (0 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (0 1)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d)))))+  (label 2)+  (parent 1)+  (unrealized (0 1) (2 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 3 1 resp1 2) na (2 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d)))))+  (label 3)+  (parent 2)+  (unrealized (0 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (2 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-1 (pubk c)))))+  (label 4)+  (parent 2)+  (seen 3)+  (unrealized (0 1) (2 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 3 1 resp1 2) na (2 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))+  (label 5)+  (parent 2)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 6)+  (parent 3)+  (unrealized (0 1) (3 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 4 1 resp1 2) na (2 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 7)+  (parent 4)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (2 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 8)+  (parent 4)+  (unrealized (0 1) (2 0) (4 0))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 9)+  (parent 5)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 10)+  (parent 5)+  (seen 13)+  (unrealized (0 1) (3 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 4 1 resp1 2) na (3 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 11)+  (parent 6)+  (seen 14)+  (unrealized (0 1) (3 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (3 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-1 (pubk c)))))+  (label 12)+  (parent 6)+  (seen 26)+  (unrealized (0 1) (3 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 4 1 resp1 2) na (3 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 13)+  (parent 6)+  (seen 25 28)+  (unrealized (0 1) (3 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 4 2 resp2 2) na (3 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 14)+  (parent 6)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 15)+  (parent 7)+  (seen 35)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 16)+  (parent 7)+  (seen 40)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 17)+  (parent 8)+  (unrealized (0 1) (4 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 18)+  (parent 8)+  (seen 45)+  (unrealized (0 1) (2 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 19)+  (parent 8)+  (seen 18)+  (unrealized (0 1) (2 0) (4 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 20)+  (parent 8)+  (seen 52)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 21)+  (parent 8)+  (seen 55)+  (unrealized (0 1) (2 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 22)+  (parent 9)+  (seen 63)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 23)+  (parent 9)+  (seen 24 68)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (3 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 24)+  (parent 10)+  (seen 28 31)+  (unrealized (0 1) (3 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 4 2 resp2 2) nb-0 (3 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 25)+  (parent 10)+  (seen 70)+  (unrealized (0 1))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 4 2 resp2 2) na (3 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 26)+  (parent 11)+  (unrealized (0 1))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (3 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d)))))+  (label 27)+  (parent 11)+  (unrealized (0 1) (3 0) (4 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) na (3 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 28)+  (parent 12)+  (seen 31 72)+  (unrealized (0 1) (3 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (3 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 29)+  (parent 12)+  (unrealized (0 1) (3 0) (5 0))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) na (3 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 30)+  (parent 12)+  (seen 33 34)+  (unrealized (0 1))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 4 2 resp2 2) nb-0 (3 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 31)+  (parent 13)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 32)+  (parent 13)+  (seen 78)+  (unrealized (0 1) (3 0) (4 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd text) (a b c d name))+  (defstrand init 3 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nb) (nc-0 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nb nc (pubk d)) (enc a b d nc nb (pubk c))+    (enc a c d nc (pubk b)) (enc b c d nc nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc (pubk d))))+    ((recv (enc a b c nc nb nc (pubk d)))+      (send (enc b c d nc nb nc nd (pubk a)))))+  (label 33)+  (parent 14)+  (seen 75)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 34)+  (parent 14)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 35)+  (parent 15)+  (seen 5 39 47)+  (unrealized (0 1) (4 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 36)+  (parent 15)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 37)+  (parent 15)+  (seen 36 47 100)+  (unrealized (0 1) (4 0))+  (comment "8 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 38)+  (parent 15)+  (seen 9 10)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 39)+  (parent 15)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 40)+  (parent 16)+  (seen 44)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 41)+  (parent 16)+  (seen 31 44 112)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 42)+  (parent 16)+  (seen 113 114)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 43)+  (parent 16)+  (seen 28 31 32)+  (unrealized (0 1) (4 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 44)+  (parent 16)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (contracted (nb-1 nb-0)) na (4 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d)))))+  (label 45)+  (parent 17)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 46)+  (parent 17)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 5 3 resp1 2) na (4 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 47)+  (parent 17)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (4 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 48)+  (parent 17)+  (unrealized (0 1) (4 0) (5 0))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 1 resp1 2) na (2 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 49)+  (parent 18)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) na (2 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 50)+  (parent 18)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (2 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 51)+  (parent 18)+  (unrealized (0 1) (2 0) (5 0))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (4 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 52)+  (parent 19)+  (seen 56)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (4 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 53)+  (parent 19)+  (seen 47 145)+  (unrealized (0 1) (2 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (4 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 54)+  (parent 19)+  (unrealized (0 1) (2 0) (4 0) (6 0))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-1 nb-0)) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 55)+  (parent 20)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 56)+  (parent 20)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 57)+  (parent 20)+  (seen 160 161 162)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 58)+  (parent 20)+  (seen 133)+  (unrealized (0 1) (4 0) (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 5 1 resp1 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 59)+  (parent 21)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 60)+  (parent 21)+  (seen 59)+  (unrealized (0 1) (2 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 61)+  (parent 21)+  (seen 160 161 162)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 62)+  (parent 21)+  (seen 143)+  (unrealized (0 1) (2 0) (5 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 63)+  (parent 22)+  (seen 5 21 38 67)+  (unrealized (0 1) (4 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 64)+  (parent 22)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 65)+  (parent 22)+  (seen 21 64 179)+  (unrealized (0 1) (4 0))+  (comment "8 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 66)+  (parent 22)+  (seen 187)+  (unrealized (0 1))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 67)+  (parent 22)+  (seen 185)+  (unrealized (0 1) (4 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 68)+  (parent 23)+  (seen 28 70 91)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 69)+  (parent 23)+  (seen 31)+  (unrealized (0 1) (4 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (4 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 70)+  (parent 23)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 71)+  (parent 24)+  (seen 86)+  (unrealized (0 1) (3 0) (5 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-1 (3 0)+    (enc a b d nb-1 nb-0 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c)))))+  (label 72)+  (parent 24)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nc nd text) (a b c d name))+  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb nc) (nc-0 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))+    (enc a c d nc (pubk b)) (enc b c d nc nc nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nc nc nd (pubk a)))+      (send (enc nc nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))+    ((recv (enc a b d nc nc (pubk c)))+      (send (enc a b c nc nc nc (pubk d))))+    ((recv (enc a b c nc nc nc (pubk d)))+      (send (enc b c d nc nc nc nd (pubk a)))))+  (label 73)+  (parent 25)+  (seen 90)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 74)+  (parent 25)+  (seen 96)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (contracted (nb-0 nb) (nc-0 nc) (nd-0 nd)) na+    (0 1) (enc a b c na nb nc (pubk d)) (enc a b d na nb (pubk c))+    (enc a c d na (pubk b)) (enc b c d na nb nc nd (pubk a)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb (pubk c))))+    ((recv (enc a b d na nb (pubk c)))+      (send (enc a b c na nb nc (pubk d))))+    ((recv (enc a b c na nb nc (pubk d)))+      (send (enc b c d na nb nc nd (pubk a)))))+  (label 75)+  (parent 26)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (b b) (c c) (d d) (na na) (nb nb) (nc nc) (nd nd))))+  (origs (na (0 0))))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d)))))+  (label 76)+  (parent 27)+  (seen 26)+  (unrealized (0 1) (3 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-1 (pubk c)))))+  (label 77)+  (parent 27)+  (seen 76)+  (unrealized (0 1) (3 0) (4 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 78)+  (parent 27)+  (seen 31)+  (unrealized (0 1) (3 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 79)+  (parent 27)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (3 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 80)+  (parent 28)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 81)+  (parent 28)+  (seen 92 217)+  (unrealized (0 1) (3 0) (5 0))+  (comment "6 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (3 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 82)+  (parent 28)+  (seen 86 203 224)+  (unrealized (0 1) (3 0) (5 0))+  (comment "6 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 83)+  (parent 29)+  (seen 76 88)+  (unrealized (0 1) (3 0) (5 0))+  (comment "6 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 4 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 84)+  (parent 29)+  (seen 226)+  (unrealized (0 1) (3 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 85)+  (parent 29)+  (seen 84 230)+  (unrealized (0 1) (3 0) (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 86)+  (parent 29)+  (seen 78 203 237)+  (unrealized (0 1) (3 0) (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 4 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 87)+  (parent 29)+  (unrealized (0 1) (3 0))+  (comment "6 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 88)+  (parent 29)+  (seen 79)+  (unrealized (0 1) (5 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a b d nc-0 nb-1 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 89)+  (parent 30)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd text) (a b c d name))+  (defstrand init 3 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb)+  (operation nonce-test (contracted (nb-0 nb) (nc-0 nc) (nd-0 nd)) nb+    (0 1) (enc a b c nb nb nc (pubk d)) (enc a b d nb nb (pubk c))+    (enc a c d nb (pubk b)) (enc b c d nb nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nb (pubk b)))+      (recv (enc b c d nb nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))+    ((recv (enc a b d nb nb (pubk c)))+      (send (enc a b c nb nb nc (pubk d))))+    ((recv (enc a b c nb nb nc (pubk d)))+      (send (enc b c d nb nb nc nd (pubk a)))))+  (label 90)+  (parent 31)+  (seen 75)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)) (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 91)+  (parent 31)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 92)+  (parent 32)+  (seen 213 224)+  (unrealized (0 1) (3 0) (4 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 93)+  (parent 32)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 1 resp1 2) nc-0 (4 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 94)+  (parent 34)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (4 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 95)+  (parent 34)+  (seen 94 97)+  (unrealized (0 1) (4 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) nc-1 (4 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))+  (label 96)+  (parent 34)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nc-0 (4 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 97)+  (parent 34)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (displaced 5 3 resp3 2) nc-1 (4 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nd-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nc-0 (pubk d)))))+  (label 98)+  (parent 34)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 99)+  (parent 35)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 100)+  (parent 35)+  (seen 7 47 99 108)+  (unrealized (0 1) (4 0))+  (comment "9 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-1 (4 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 101)+  (parent 35)+  (seen 9 10)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 102)+  (parent 35)+  (seen 290)+  (unrealized (0 1) (4 0) (5 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 103)+  (parent 36)+  (seen 295)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 104)+  (parent 36)+  (seen 301)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-2 nb-1)) nb-0 (4 0)+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 105)+  (parent 37)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 106)+  (parent 37)+  (seen 15 16)+  (unrealized (0 1))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 107)+  (parent 37)+  (seen 310)+  (unrealized (0 1) (4 0) (6 0))+  (comment "8 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-2 (4 0)+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 108)+  (parent 37)+  (seen 109 110 111)+  (unrealized (0 1))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))+  (label 109)+  (parent 39)+  (seen 318)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 110)+  (parent 39)+  (seen 324)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 111)+  (parent 39)+  (seen 330)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 112)+  (parent 40)+  (seen 31 44 114)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 113)+  (parent 40)+  (seen 114 119)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 114)+  (parent 40)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 115)+  (parent 40)+  (seen 342)+  (unrealized (0 1) (4 0) (5 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 116)+  (parent 41)+  (seen 347)+  (unrealized (0 1) (4 0) (5 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 117)+  (parent 42)+  (seen 31 80 81 82)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))+  (label 118)+  (parent 42)+  (seen 353)+  (unrealized (0 1) (4 0) (6 0))+  (comment "8 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-2 (4 0)+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 119)+  (parent 42)+  (seen 121 122 123)+  (unrealized (0 1))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 120)+  (parent 43)+  (seen 70 73 74)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nc nb nd text) (a b c d name))+  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nc) (nc-0 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))+    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nc nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nc nc nd (pubk a)))+      (send (enc nc nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))+    ((recv (enc a b d nc nc (pubk c)))+      (send (enc a b c nc nc nc (pubk d))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))+    ((recv (enc a b c nc nc nc (pubk d)))+      (send (enc b c d nc nc nc nd (pubk a)))))+  (label 121)+  (parent 44)+  (seen 73)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 122)+  (parent 44)+  (seen 361)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 6 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 123)+  (parent 44)+  (seen 299 328 364 367)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-0 nc-1 (pubk d))+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 124)+  (parent 45)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-0 nc-1 (pubk d))+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-1 (pubk d)))+      (send (enc b c d na nb-0 nc-1 nd-0 (pubk a)))))+  (label 125)+  (parent 45)+  (seen 97)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))+    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 126)+  (parent 46)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))+    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 127)+  (parent 46)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 128)+  (parent 47)+  (seen 334 383)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 129)+  (parent 47)+  (seen 328 390)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 130)+  (parent 48)+  (unrealized (0 1) (4 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 131)+  (parent 48)+  (seen 401)+  (unrealized (0 1) (5 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 132)+  (parent 48)+  (seen 130)+  (unrealized (0 1) (4 0) (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 133)+  (parent 48)+  (seen 167)+  (unrealized (0 1) (4 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-2 (pubk d)))))+  (label 134)+  (parent 48)+  (seen 409 411)+  (unrealized (0 1) (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))+    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 135)+  (parent 49)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (0 1)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b c na nb-1 nc-1 (pubk d))+    (enc a b d na nb-0 (pubk c)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 136)+  (parent 49)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 137)+  (parent 50)+  (seen 421)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 138)+  (parent 50)+  (seen 428)+  (unrealized (0 1) (5 0))+  (comment "7 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 139)+  (parent 51)+  (unrealized (0 1) (5 0))+  (comment "5 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 140)+  (parent 51)+  (seen 144 442)+  (unrealized (0 1) (2 0) (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 141)+  (parent 51)+  (seen 448)+  (unrealized (0 1) (2 0) (5 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 142)+  (parent 51)+  (seen 447 450)+  (unrealized (0 1) (5 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 143)+  (parent 51)+  (seen 177 443 451)+  (unrealized (0 1) (2 0) (5 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 144)+  (parent 51)+  (unrealized (0 1) (2 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-2 nb-0)) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 145)+  (parent 52)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)+    (enc a b d nb-2 nb-2 (pubk c)) (enc a b d nb-2 nb-1 (pubk c))+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 146)+  (parent 52)+  (seen 463 464 465)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 147)+  (parent 52)+  (seen 165 166 413)+  (unrealized (0 1) (4 0) (6 0))+  (comment "7 in cohort - 2 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 148)+  (parent 52)+  (seen 157 467)+  (unrealized (0 1) (4 0) (6 0))+  (comment "7 in cohort - 4 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 149)+  (parent 53)+  (unrealized (0 1))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-2 (2 0)+    (enc a b c nb-2 nb-2 nc-1 (pubk d)) (enc a b d nb-2 nb-2 (pubk c))+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 150)+  (parent 53)+  (seen 463 464 465)+  (unrealized (0 1))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp2 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 151)+  (parent 53)+  (seen 476)+  (unrealized (0 1) (2 0) (6 0))+  (comment "8 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 152)+  (parent 53)+  (seen 483)+  (unrealized (0 1) (2 0) (6 0))+  (comment "8 in cohort - 7 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 1 resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 153)+  (parent 54)+  (seen 130)+  (unrealized (0 1) (4 0) (6 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 3 resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 154)+  (parent 54)+  (seen 489)+  (unrealized (0 1) (2 0) (6 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 155)+  (parent 54)+  (seen 469 494)+  (unrealized (0 1) (2 0) (4 0))+  (comment "6 in cohort - 4 not yet seen"))++(comment "Strand bound exceeded--aborting run")++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-3) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-3 (pubk c)))))+  (label 156)+  (parent 54)+  (unrealized (0 1) (2 0) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 157)+  (parent 54)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 158)+  (parent 54)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-2) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-2)+  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-2 (pubk b)))+      (recv (enc b c d nb-2 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-0 (pubk c))))+    ((recv (enc a b d nb-2 nb-0 (pubk c)))+      (send (enc a b c nb-2 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-1 (pubk c))))+    ((recv (enc a b d nb-2 nb-1 (pubk c)))+      (send (enc a b c nb-2 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-2 (pubk c))))+    ((recv (enc a b d nb-2 nb-2 (pubk c)))+      (send (enc a b c nb-2 nb-2 nc-2 (pubk d)))))+  (label 159)+  (parent 54)+  (unrealized (0 1) (2 0) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 160)+  (parent 55)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 161)+  (parent 55)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 162)+  (parent 55)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 163)+  (parent 56)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 164)+  (parent 56)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 165)+  (parent 58)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 166)+  (parent 58)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 167)+  (parent 58)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 168)+  (parent 59)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 169)+  (parent 59)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((1 1) (0 1)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-2 nb-0)) nb-0 (2 0)+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 170)+  (parent 60)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-2 (2 0)+    (enc a b c nb-2 nb-2 nc-1 (pubk d)) (enc a b d nb-2 nb-2 (pubk c))+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 171)+  (parent 60)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp2 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 172)+  (parent 60)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (2 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a b d nb-1 nb-2 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 173)+  (parent 60)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 174)+  (parent 62)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 175)+  (parent 62)+  (unrealized (0 1) (2 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 176)+  (parent 62)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nc-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nc-1 nc-1 nd-0 (pubk a)))))+  (label 177)+  (parent 62)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 178)+  (parent 63)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 179)+  (parent 63)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 180)+  (parent 63)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 181)+  (parent 64)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 182)+  (parent 64)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 183)+  (parent 65)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-2 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 184)+  (parent 65)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-2 (4 0)+    (enc a b d nb-2 nb-1 (pubk c)) (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 185)+  (parent 65)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 186)+  (parent 66)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 187)+  (parent 66)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (contracted (nb-0 nc-0)) nc-0 (4 0)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 188)+  (parent 67)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 3 resp1 2) nc-0 (4 0)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 189)+  (parent 67)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 3 resp1 2) nc-1 (4 0)+    (enc a b c nc-1 nc-1 nc-1 (pubk d)) (enc a b d nc-1 nc-1 (pubk c))+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))+  (label 190)+  (parent 67)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (4 0)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))+  (label 191)+  (parent 67)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (4 0)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 192)+  (parent 67)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 193)+  (parent 68)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 194)+  (parent 69)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 195)+  (parent 69)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 196)+  (parent 69)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nc nb nd text) (a b c d name))+  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nc) (nc-0 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))+    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nc nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nc nc nd (pubk a)))+      (send (enc nc nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))+    ((recv (enc a b d nc nc (pubk c)))+      (send (enc a b c nc nc nc (pubk d))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))+    ((recv (enc a b c nc nc nc (pubk d)))+      (send (enc b c d nc nc nc nd (pubk a)))))+  (label 197)+  (parent 70)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 198)+  (parent 70)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 199)+  (parent 70)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 200)+  (parent 71)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 201)+  (parent 71)+  (unrealized (0 1) (3 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 202)+  (parent 71)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 203)+  (parent 71)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nc nd nb text) (a b c d name))+  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nc) (nc-0 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b d nc nc (pubk c))+    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nc nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nc nc nd (pubk a)))+      (send (enc nc nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))+    ((recv (enc a b d nc nc (pubk c)))+      (send (enc a b c nc nc nc (pubk d))))+    ((recv (enc a b c nc nc nc (pubk d)))+      (send (enc b c d nc nc nc nd (pubk a))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c)))))+  (label 204)+  (parent 72)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 205)+  (parent 72)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b))+    (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 206)+  (parent 72)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 nb-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (4 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c)))))+  (label 207)+  (parent 74)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nc-0 (4 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 208)+  (parent 74)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nd-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nd-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nd-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (displaced 5 3 resp3 2) nc-1 (4 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nd-0 (pubk c))))+    ((recv (enc a b d nd-0 nd-0 (pubk c)))+      (send (enc a b c nd-0 nd-0 nd-0 (pubk d))))+    ((recv (enc a b c nd-0 nd-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nd-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nd-0 (pubk c)))+      (send (enc a b c nd-0 nd-0 nc-0 (pubk d)))))+  (label 209)+  (parent 74)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) na (3 0)+    (enc a b c na nb-0 nc-1 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 210)+  (parent 76)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (3 0)+    (enc a b c na nb-0 nc-1 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-1 (pubk d)))+      (send (enc b c d na nb-0 nc-1 nd-1 (pubk a)))))+  (label 211)+  (parent 76)+  (unrealized (0 1) (3 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nc-0 nd-0 nc-1 nb-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (contracted (nb-1 nb-0)) na (4 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-0 (pubk c)))))+  (label 212)+  (parent 77)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (4 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 213)+  (parent 77)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 2 resp2 2) na (4 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d)))))+  (label 214)+  (parent 77)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (4 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-2 (pubk d)))))+  (label 215)+  (parent 77)+  (unrealized (0 1) (3 0) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (4 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 216)+  (parent 77)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (3 0)+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 217)+  (parent 78)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) nb-0 (3 0)+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 218)+  (parent 78)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (3 0)+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-1 (pubk a)))))+  (label 219)+  (parent 78)+  (unrealized (0 1) (3 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 text) (a b c d name))+  (defstrand init 3 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nb) (nc-1 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nb nc (pubk d)) (enc a b c nc nb nc-0 (pubk d))+    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc (pubk d))))+    ((recv (enc a b c nc nb nc (pubk d)))+      (send (enc b c d nc nb nc nd (pubk a))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc-0 (pubk d)))))+  (label 220)+  (parent 79)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)+    (enc a b c nc-0 nb-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-1 (pubk a)))))+  (label 221)+  (parent 79)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 text) (a b c d name))+  (defstrand init 3 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb)+  (operation nonce-test (contracted (nb-1 nb) (nc-0 nc) (nd-0 nd)) nb+    (0 1) (enc a b c nb nb nc (pubk d)) (enc a b d nb nb (pubk c))+    (enc a b d nb nb-0 (pubk c)) (enc a c d nb (pubk b))+    (enc b c d nb nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nb (pubk b)))+      (recv (enc b c d nb nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))+    ((recv (enc a b d nb nb (pubk c)))+      (send (enc a b c nb nb nc (pubk d))))+    ((recv (enc a b c nb nb nc (pubk d)))+      (send (enc b c d nb nb nc nd (pubk a))))+    ((recv (enc a c d nb (pubk b)))+      (send (enc a b d nb nb-0 (pubk c)))))+  (label 222)+  (parent 80)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b))+    (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 223)+  (parent 80)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 224)+  (parent 81)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 225)+  (parent 81)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 226)+  (parent 82)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 227)+  (parent 82)+  (unrealized (0 1) (3 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 4 resp1 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 228)+  (parent 83)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 4 resp1 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 229)+  (parent 83)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 230)+  (parent 83)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (5 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 231)+  (parent 83)+  (unrealized (0 1) (3 0) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nd-0 nb-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (contracted (nb-1 nb-0) (nc-1 nc-0)) na (3 0)+    (enc a b c na nb-0 nc-0 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d)))))+  (label 232)+  (parent 84)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (3 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d)))))+  (label 233)+  (parent 84)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 2 resp2 2) na (3 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d)))))+  (label 234)+  (parent 84)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (3 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 235)+  (parent 84)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0))+    ((6 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (3 0)+    (enc a b c na nb-1 nc-1 (pubk d)) (enc a b d na nb-1 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-1 (pubk a)))))+  (label 236)+  (parent 84)+  (unrealized (0 1) (3 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (5 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 237)+  (parent 85)+  (unrealized (0 1) (3 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 4 resp1 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 238)+  (parent 85)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 nc-2 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((0 0) (7 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 239)+  (parent 85)+  (unrealized (0 1) (3 0) (5 0) (7 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 7 2 resp2 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-2 (pubk c)))))+  (label 240)+  (parent 85)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp1 2) nb-0 (5 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 241)+  (parent 86)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp1 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 242)+  (parent 86)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-0 (5 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 243)+  (parent 86)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (5 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (3 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (5 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 244)+  (parent 86)+  (unrealized (0 1) (3 0) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nd-0 nb-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-1 nb-0) (nc-1 nc-0)) nb-0 (3 0)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))+  (label 245)+  (parent 87)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (3 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 246)+  (parent 87)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0))+    ((6 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (3 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 247)+  (parent 87)+  (unrealized (0 1) (3 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (3 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 248)+  (parent 87)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (3 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 249)+  (parent 87)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0))+    ((6 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (3 0)+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-1 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-1 (pubk a)))))+  (label 250)+  (parent 87)+  (unrealized (0 1) (3 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 4 resp1 2) nc-0 (5 0)+    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 251)+  (parent 88)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nb-1 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nb-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nb-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (0 1)) ((4 1) (5 0)) ((5 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 4 resp1 2) nc-1 (5 0)+    (enc a b c nc-1 nb-0 nc-1 (pubk d)) (enc a b d nc-1 nb-0 (pubk c))+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nb-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nb-1 (pubk d)))+      (send (enc b c d nb-1 nb-0 nb-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-0 (pubk d)))))+  (label 252)+  (parent 88)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (5 0)+    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-2 (pubk d)))))+  (label 253)+  (parent 88)+  (unrealized (0 1) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (3 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (5 0)+    (enc a b c nc-0 nb-0 nc-0 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-1 (pubk a)))))+  (label 254)+  (parent 88)+  (unrealized (0 1) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 255)+  (parent 89)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 4 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 256)+  (parent 89)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-2 (pubk c)))))+  (label 257)+  (parent 89)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nb-1 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-0 (pubk d)))))+  (label 258)+  (parent 89)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nb-1 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nb-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nb-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 4 resp1 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nb-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nb-1 (pubk d)))+      (send (enc b c d nb-1 nb-0 nb-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-0 (pubk d)))))+  (label 259)+  (parent 89)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((2 1) (5 0)) ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 260)+  (parent 89)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nb-1 nc-0 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (5 0)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (displaced 6 3 resp3 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nd-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-1 (pubk c))))+    ((recv (enc a b d nd-0 nb-1 (pubk c)))+      (send (enc a b c nd-0 nb-1 nc-0 (pubk d)))))+  (label 261)+  (parent 89)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 text) (a b c d name))+  (defstrand init 3 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb)+  (operation nonce-test (contracted (nb-1 nb) (nc-0 nc) (nd-0 nd)) nb+    (0 1) (enc a b c nb nb nc (pubk d)) (enc a b d nb nb (pubk c))+    (enc a b d nb nb-0 (pubk c)) (enc a c d nb (pubk b))+    (enc b c d nb nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nb (pubk b)))+      (recv (enc b c d nb nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))+    ((recv (enc a b d nb nb (pubk c)))+      (send (enc a b c nb nb nc (pubk d))))+    ((recv (enc a b c nb nb nc (pubk d)))+      (send (enc b c d nb nb nc nd (pubk a))))+    ((recv (enc a c d nb (pubk b)))+      (send (enc a b d nb nb-0 (pubk c)))))+  (label 262)+  (parent 91)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b))+    (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 263)+  (parent 91)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 264)+  (parent 92)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))+  (label 265)+  (parent 92)+  (unrealized (0 1) (3 0) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 nb-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (4 0)+    (enc a b d nb-1 nb-0 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c)))))+  (label 266)+  (parent 92)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nc nd nc-0 text) (a b c d name))+  (defstrand init 3 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nc) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nc) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nc) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc) (nb nc) (nc nc-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (0 1))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb nc) (nc-1 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nc nc (pubk d)) (enc a b c nc nc nc-0 (pubk d))+    (enc a b d nc nc (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nc nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nc nc nd (pubk a)))+      (send (enc nc nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nc (pubk c))))+    ((recv (enc a b d nc nc (pubk c)))+      (send (enc a b c nc nc nc (pubk d))))+    ((recv (enc a b c nc nc nc (pubk d)))+      (send (enc b c d nc nc nc nd (pubk a))))+    ((recv (enc a b d nc nc (pubk c)))+      (send (enc a b c nc nc nc-0 (pubk d)))))+  (label 267)+  (parent 93)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 nb-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d))+    (enc a b c nc-0 nc-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c)))))+  (label 268)+  (parent 93)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d))+    (enc a b c nc-0 nc-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-1 nd-1 (pubk a)))))+  (label 269)+  (parent 93)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 text) (a b c d name))+  (defstrand init 3 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nb) (nc-1 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nb nc (pubk d)) (enc a b c nc nb nc-0 (pubk d))+    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc (pubk d))))+    ((recv (enc a b c nc nb nc (pubk d)))+      (send (enc b c d nc nb nc nd (pubk a))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc-0 (pubk d)))))+  (label 270)+  (parent 94)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)+    (enc a b c nc-0 nb-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-1 (pubk a)))))+  (label 271)+  (parent 94)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nc-1 nb-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (contracted (nb-1 nb-0)) nc-0 (4 0)+    (enc a b d nc-0 nb-0 (pubk c)) (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c)))))+  (label 272)+  (parent 95)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-1 (4 0)+    (enc a b d nc-1 nb-1 (pubk c)) (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 273)+  (parent 95)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (4 0)+    (enc a b d nc-0 nb-1 (pubk c)) (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-2 (pubk d)))))+  (label 274)+  (parent 95)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (displaced 6 3 resp3 2) nc-1 (4 0)+    (enc a b d nc-1 nb-1 (pubk c)) (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nd-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-1 (pubk c)))))+  (label 275)+  (parent 95)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nd nc text) (a b c d name))+  (defstrand init 3 (na nb) (nb nb) (nc nb) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb) (nb nb) (nc nb) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb) (nb nb) (nc nb) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (3 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb)+  (operation nonce-test (contracted (nb-0 nb) (nc-0 nb) (nd-0 nd)) nb+    (0 1) (enc a b c nb nb nb (pubk d)) (enc a b c nb nb nc (pubk d))+    (enc a b d nb nb (pubk c)) (enc a c d nb (pubk b))+    (enc b c d nb nb nb nd (pubk a)))+  (traces+    ((send (enc a c d nb (pubk b)))+      (recv (enc b c d nb nb nb nd (pubk a)))+      (send (enc nb nb nd (pubk b))))+    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))+    ((recv (enc a b d nb nb (pubk c)))+      (send (enc a b c nb nb nb (pubk d))))+    ((recv (enc a b c nb nb nb (pubk d)))+      (send (enc b c d nb nb nb nd (pubk a))))+    ((recv (enc a b d nb nb (pubk c)))+      (send (enc a b c nb nb nc (pubk d)))))+  (label 276)+  (parent 96)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nb-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)) (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 277)+  (parent 96)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 nd-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nb-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)) (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-1 (pubk a)))))+  (label 278)+  (parent 96)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 text) (a b c d name))+  (defstrand init 3 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc) (nb nb) (nc nc-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((2 1) (4 0))+    ((3 1) (0 1)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc)+  (operation nonce-test (contracted (nb-0 nb) (nc-1 nc) (nd-0 nd)) nc+    (0 1) (enc a b c nc nb nc (pubk d)) (enc a b c nc nb nc-0 (pubk d))+    (enc a b d nc nb (pubk c)) (enc a c d nc (pubk b))+    (enc b c d nc nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nc (pubk b)))+      (recv (enc b c d nc nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc (pubk b))) (send (enc a b d nc nb (pubk c))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc (pubk d))))+    ((recv (enc a b c nc nb nc (pubk d)))+      (send (enc b c d nc nb nc nd (pubk a))))+    ((recv (enc a b d nc nb (pubk c)))+      (send (enc a b c nc nb nc-0 (pubk d)))))+  (label 279)+  (parent 97)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 nc-1 nd-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((2 1) (4 0)) ((3 1) (0 1)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp3 2) nc-0 (0 1)+    (enc a b c nc-0 nb-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nb-0 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-1 (pubk a)))))+  (label 280)+  (parent 97)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nd nc text) (a b c d name))+  (defstrand init 3 (na nd) (nb nb) (nc nd) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd) (nb nb) (nc nd) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nd) (nb nb) (nc nd) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nd) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (2 0)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd)+  (operation nonce-test (contracted (nb-0 nb) (nc-0 nd) (nd-0 nd)) nd+    (0 1) (enc a b c nd nb nd (pubk d)) (enc a b c nd nb nc (pubk d))+    (enc a b d nd nb (pubk c)) (enc a c d nd (pubk b))+    (enc b c d nd nb nd nd (pubk a)))+  (traces+    ((send (enc a c d nd (pubk b)))+      (recv (enc b c d nd nb nd nd (pubk a)))+      (send (enc nb nd nd (pubk b))))+    ((recv (enc a c d nd (pubk b))) (send (enc a b d nd nb (pubk c))))+    ((recv (enc a b d nd nb (pubk c)))+      (send (enc a b c nd nb nd (pubk d))))+    ((recv (enc a b c nd nb nd (pubk d)))+      (send (enc b c d nd nb nd nd (pubk a))))+    ((recv (enc a b d nd nb (pubk c)))+      (send (enc a b c nd nb nc (pubk d)))))+  (label 281)+  (parent 98)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 nd-1 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (added-strand resp3 2) nd-0 (0 1)+    (enc a b c nd-0 nb-0 nd-0 (pubk d))+    (enc a b c nd-0 nb-0 nc-0 (pubk d)) (enc a b d nd-0 nb-0 (pubk c))+    (enc a c d nd-0 (pubk b)) (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nd-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nd-0 nd-1 (pubk a)))))+  (label 282)+  (parent 98)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 nd-1 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nd-0) (nb nb-0) (nc nc-0) (nd nd-1) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (2 0)) ((2 1) (3 0))+    ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (added-strand resp3 2) nd-0 (0 1)+    (enc a b c nd-0 nb-0 nd-0 (pubk d))+    (enc a b c nd-0 nb-0 nc-0 (pubk d)) (enc a b d nd-0 nb-0 (pubk c))+    (enc a c d nd-0 (pubk b)) (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nd-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nd-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nd-0 nb-0 nc-0 nd-1 (pubk a)))))+  (label 283)+  (parent 98)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))+    ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 284)+  (parent 99)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))+    ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 285)+  (parent 99)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-2 nb-1)) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 286)+  (parent 100)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))+    ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-2 (4 0)+    (enc a b d nb-2 nb-2 (pubk c)) (enc a b d nb-2 nb-1 (pubk c))+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c)))))+  (label 287)+  (parent 100)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 288)+  (parent 100)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 289)+  (parent 100)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 290)+  (parent 102)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 291)+  (parent 102)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 292)+  (parent 102)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 293)+  (parent 102)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))+  (label 294)+  (parent 102)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 295)+  (parent 103)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 296)+  (parent 103)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (0 1)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 297)+  (parent 103)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 298)+  (parent 103)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 299)+  (parent 103)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nc-1 nc-0 (pubk d)))+      (send (enc b c d nc-1 nc-1 nc-0 nd-0 (pubk a)))))+  (label 300)+  (parent 103)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 301)+  (parent 104)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 302)+  (parent 104)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (0 1)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 303)+  (parent 104)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 304)+  (parent 104)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 305)+  (parent 104)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-1 nd-0 (pubk a)))))+  (label 306)+  (parent 104)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 307)+  (parent 105)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-1 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 308)+  (parent 105)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (2 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((2 1) (3 0)) ((3 1) (0 1)) ((4 1) (3 0))+    ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 309)+  (parent 106)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (6 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 310)+  (parent 107)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 311)+  (parent 107)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 5 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 312)+  (parent 107)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)+    (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-3) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-3 (pubk c)))))+  (label 313)+  (parent 107)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))+  (label 314)+  (parent 107)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))+  (label 315)+  (parent 107)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 7 2 resp2 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-2 (pubk d)))))+  (label 316)+  (parent 107)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d))+    (enc a b c nc-0 nb-0 nc-1 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a b d nc-0 nb-1 (pubk c))+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-2 (pubk d)))))+  (label 317)+  (parent 108)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))+  (label 318)+  (parent 109)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))+  (label 319)+  (parent 109)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 320)+  (parent 109)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-2 (5 0)+    (enc a c d nc-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 321)+  (parent 109)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-2 (pubk d)))))+  (label 322)+  (parent 109)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 4 resp2 2) nc-2 (5 0)+    (enc a c d nc-2 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 323)+  (parent 109)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 324)+  (parent 110)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 325)+  (parent 110)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 326)+  (parent 110)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a)))))+  (label 327)+  (parent 110)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 328)+  (parent 110)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 4 resp2 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 329)+  (parent 110)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 330)+  (parent 111)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 331)+  (parent 111)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 332)+  (parent 111)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 333)+  (parent 111)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 334)+  (parent 111)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 4 resp2 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 335)+  (parent 111)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))+    ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 336)+  (parent 112)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0))+    ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-1 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 337)+  (parent 112)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 338)+  (parent 113)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (0 1)) ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (4 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a b d nb-0 nb-2 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))+  (label 339)+  (parent 113)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nb-0 nd text) (a b c d name))+  (defstrand init 3 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb) (nb nb) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb) (nb nb) (nc nc) (a a) (b b) (c c) (d d))+  (defstrand resp1 2 (na nb) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb)+  (operation nonce-test (contracted (nb-1 nb) (nc-0 nc) (nd-0 nd)) nb+    (0 1) (enc a b c nb nb nc (pubk d)) (enc a b d nb nb (pubk c))+    (enc a b d nb nb-0 (pubk c)) (enc a c d nb (pubk b))+    (enc b c d nb nb nc nd (pubk a)))+  (traces+    ((send (enc a c d nb (pubk b)))+      (recv (enc b c d nb nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb (pubk c))))+    ((recv (enc a b d nb nb (pubk c)))+      (send (enc a b c nb nb nc (pubk d))))+    ((recv (enc a c d nb (pubk b))) (send (enc a b d nb nb-0 (pubk c))))+    ((recv (enc a b c nb nb nc (pubk d)))+      (send (enc b c d nb nb nc nd (pubk a)))))+  (label 340)+  (parent 114)+  (unrealized)+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b))+    (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 341)+  (parent 114)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 342)+  (parent 115)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 343)+  (parent 115)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 344)+  (parent 115)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 345)+  (parent 115)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 346)+  (parent 115)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 347)+  (parent 116)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 348)+  (parent 116)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nc-1 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (4 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 349)+  (parent 116)+  (unrealized (0 1) (4 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d)))))+  (label 350)+  (parent 116)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 351)+  (parent 116)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nd-0 nb-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (4 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c)))))+  (label 352)+  (parent 117)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((1 1) (6 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))+  (label 353)+  (parent 118)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))+  (label 354)+  (parent 118)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 5 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-1 (pubk d)))))+  (label 355)+  (parent 118)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 nb-2 nc-1 nb-3 text)+    (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-3) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-3 (pubk c)))))+  (label 356)+  (parent 118)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((3 1) (6 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d)))))+  (label 357)+  (parent 118)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d)))))+  (label 358)+  (parent 118)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (2 0))+    ((2 1) (6 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 7 2 resp2 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 359)+  (parent 118)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nb-1 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp2 2) nc-0 (0 1)+    (enc a b c nc-0 nc-0 nc-0 (pubk d)) (enc a b d nc-0 nc-0 (pubk c))+    (enc a b d nc-0 nb-0 (pubk c)) (enc a b d nc-0 nb-1 (pubk c))+    (enc a c d nc-0 (pubk b)) (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d)))))+  (label 360)+  (parent 119)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 361)+  (parent 122)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 362)+  (parent 122)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 363)+  (parent 122)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((3 1) (5 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nb-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nb-0 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d)))))+  (label 364)+  (parent 122)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((2 1) (5 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d)))))+  (label 365)+  (parent 122)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nd-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nd-0) (nb nd-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (displaced 6 4 resp3 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nd-0 (pubk c))))+    ((recv (enc a b d nd-0 nd-0 (pubk c)))+      (send (enc a b c nd-0 nd-0 nd-0 (pubk d))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b c nd-0 nd-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nd-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nd-0 (pubk c)))+      (send (enc a b c nd-0 nd-0 nc-0 (pubk d)))))+  (label 366)+  (parent 122)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d)))))+  (label 367)+  (parent 123)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nd-0 nc-1 nb-1 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (4 0)) ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (added-strand resp1 2) nc-0 (5 0)+    (enc a c d nc-0 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c)))))+  (label 368)+  (parent 123)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nd-0 nc-0 text) (a b c d name))+  (defstrand init 3 (na nd-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nd-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nd-0) (nc nd-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nd-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nd-0) (nb nd-0) (nc nd-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nd-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (4 0))+    ((3 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nd-0)+  (operation nonce-test (displaced 6 4 resp3 2) nc-1 (5 0)+    (enc a c d nc-1 (pubk b)))+  (traces+    ((send (enc a c d nd-0 (pubk b)))+      (recv (enc b c d nd-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nd-0 (pubk c))))+    ((recv (enc a b d nd-0 nd-0 (pubk c)))+      (send (enc a b c nd-0 nd-0 nd-0 (pubk d))))+    ((recv (enc a c d nd-0 (pubk b)))+      (send (enc a b d nd-0 nb-0 (pubk c))))+    ((recv (enc a b c nd-0 nd-0 nd-0 (pubk d)))+      (send (enc b c d nd-0 nd-0 nd-0 nd-0 (pubk a))))+    ((recv (enc a b d nd-0 nb-0 (pubk c)))+      (send (enc a b c nd-0 nb-0 nc-0 (pubk d)))))+  (label 369)+  (parent 123)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 370)+  (parent 124)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-1 (pubk c)))))+  (label 371)+  (parent 124)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 372)+  (parent 124)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 373)+  (parent 124)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((3 1) (4 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 5 3 resp2 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 374)+  (parent 124)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-1 (pubk d)))+      (send (enc b c d na nb-0 nc-1 nd-0 (pubk a)))))+  (label 375)+  (parent 125)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nd-0 nb-1 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (5 0)) ((1 1) (3 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-1 (pubk d)))+      (send (enc b c d na nb-0 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-1 (pubk c)))))+  (label 376)+  (parent 125)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (2 0)) ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 5 1 resp1 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 377)+  (parent 125)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((1 1) (3 0)) ((2 1) (4 0)) ((3 1) (2 0))+    ((4 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 5 2 resp2 2) na (4 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 378)+  (parent 125)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 379)+  (parent 126)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 380)+  (parent 126)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 381)+  (parent 126)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 382)+  (parent 126)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 383)+  (parent 126)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 384)+  (parent 126)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 385)+  (parent 126)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 386)+  (parent 127)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 387)+  (parent 127)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 388)+  (parent 127)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 389)+  (parent 127)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 390)+  (parent 127)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 391)+  (parent 127)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 392)+  (parent 127)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 393)+  (parent 128)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 394)+  (parent 128)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 395)+  (parent 128)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 396)+  (parent 128)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 397)+  (parent 129)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 398)+  (parent 129)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 399)+  (parent 129)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (4 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-1 nd-0 (pubk a)))))+  (label 400)+  (parent 129)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (contracted (nb-1 nb-0)) na (4 0)+    (enc a b c na nb-0 nc-2 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 401)+  (parent 130)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (4 0)+    (enc a b c na nb-0 nc-2 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 402)+  (parent 130)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (4 0)+    (enc a b c na nb-0 nc-2 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-2 (pubk d)))))+  (label 403)+  (parent 130)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-2) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (4 0)+    (enc a b c na nb-0 nc-2 (pubk d)) (enc a b d na nb-0 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d))))+    ((recv (enc a b c na nb-0 nc-2 (pubk d)))+      (send (enc b c d na nb-0 nc-2 nd-0 (pubk a)))))+  (label 404)+  (parent 130)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 405)+  (parent 131)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 406)+  (parent 131)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nc-3 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-3) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-3 (pubk d)))))+  (label 407)+  (parent 131)+  (unrealized (0 1) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 408)+  (parent 132)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-2 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 409)+  (parent 132)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 nc-3 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-3) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((0 0) (7 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-3 (pubk d)))))+  (label 410)+  (parent 132)+  (unrealized (0 1) (4 0) (5 0) (7 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0))+    ((4 1) (3 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (contracted (nb-1 nb-0)) nb-0 (4 0)+    (enc a b c nb-0 nb-0 nc-2 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 411)+  (parent 133)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (4 0)+    (enc a b c nb-0 nb-0 nc-2 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 412)+  (parent 133)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (4 0)+    (enc a b c nb-0 nb-0 nc-2 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 413)+  (parent 133)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-2) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (4 0)+    (enc a b c nb-0 nb-0 nc-2 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-2 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-2 nd-0 (pubk a)))))+  (label 414)+  (parent 133)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-2 (pubk d)))))+  (label 415)+  (parent 134)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 416)+  (parent 134)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 nc-3 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-3) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp2 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-2 (pubk d))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-3 (pubk d)))))+  (label 417)+  (parent 134)+  (unrealized (0 1) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 418)+  (parent 135)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a)))))+  (label 419)+  (parent 135)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-0 (pubk d)))+      (send (enc b c d na nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 420)+  (parent 135)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 421)+  (parent 135)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 422)+  (parent 135)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 423)+  (parent 135)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 424)+  (parent 135)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 425)+  (parent 136)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 426)+  (parent 136)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b)))+      (send (enc a b d na nb-2 (pubk c)))))+  (label 427)+  (parent 136)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 428)+  (parent 136)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 429)+  (parent 136)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-1 (pubk c))))+    ((recv (enc a b d nc-0 nb-1 (pubk c)))+      (send (enc a b c nc-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 430)+  (parent 136)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 431)+  (parent 136)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 432)+  (parent 137)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 433)+  (parent 137)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 434)+  (parent 137)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nc-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nc-0 nc-0 (pubk d)))+      (send (enc b c d nc-0 nc-0 nc-0 nd-0 (pubk a)))))+  (label 435)+  (parent 137)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nc-1 nc-0 (pubk d)))+      (send (enc b c d nc-1 nc-1 nc-0 nd-0 (pubk a)))))+  (label 436)+  (parent 137)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 437)+  (parent 138)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (2 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (5 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 438)+  (parent 138)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 3 resp1 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 439)+  (parent 138)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nc-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nc-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (5 0))+    ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-0)+  (operation nonce-test (displaced 6 2 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-0 (pubk b)))+      (recv (enc b c d nc-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nc-0 (pubk c))))+    ((recv (enc a b d nc-0 nc-0 (pubk c)))+      (send (enc a b c nc-0 nc-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-0 (pubk b)))+      (send (enc a b d nc-0 nb-0 (pubk c))))+    ((recv (enc a b d nc-0 nb-0 (pubk c)))+      (send (enc a b c nc-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 440)+  (parent 138)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (2 0)) ((4 1) (5 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-1 nd-0 (pubk a)))))+  (label 441)+  (parent 138)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 442)+  (parent 139)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 3 resp1 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 443)+  (parent 139)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (1 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-1 (pubk d))))+    ((recv (enc a b c na nb-0 nc-1 (pubk d)))+      (send (enc b c d na nb-0 nc-1 nd-0 (pubk a)))))+  (label 444)+  (parent 139)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-2 (pubk d)))))+  (label 445)+  (parent 139)+  (unrealized (0 1) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 446)+  (parent 139)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a)))))+  (label 447)+  (parent 140)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 6 4 resp2 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a)))))+  (label 448)+  (parent 140)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-2 (pubk d)))))+  (label 449)+  (parent 140)+  (unrealized (0 1) (2 0) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c)))))+  (label 450)+  (parent 141)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c)))))+  (label 451)+  (parent 141)+  (unrealized (0 1) (2 0) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 nc-2 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b c na nb-1 nc-1 (pubk d)))+      (send (enc b c d na nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 452)+  (parent 141)+  (unrealized (0 1) (2 0) (5 0) (7 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nb-2 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 7 4 resp2 2) na (5 0)+    (enc a b d na nb-2 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-2 (pubk c)))))+  (label 453)+  (parent 141)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 454)+  (parent 142)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (5 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (2 0))+    ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (5 0)+    (enc a b d nb-0 nb-0 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 455)+  (parent 142)+  (unrealized (0 1) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (5 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-1 nd-0 (pubk a)))))+  (label 456)+  (parent 142)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 6 4 resp2 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 457)+  (parent 143)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (5 0)) ((4 1) (2 0))+    ((5 1) (2 0)) ((6 1) (5 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp2 2) nb-1 (5 0)+    (enc a b d nb-1 nb-1 (pubk c)) (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))+  (label 458)+  (parent 143)+  (unrealized (0 1) (2 0) (5 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (3 0)) ((3 1) (4 0))+    ((4 1) (1 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (contracted (nb-1 nb-0)) nc-1 (2 0)+    (enc a b c nc-1 nb-0 nc-1 (pubk d)) (enc a b d nc-1 nb-0 (pubk c))+    (enc a c d nc-1 (pubk b)) (enc b c d nc-1 nb-0 nc-1 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-0 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-0 nc-1 nd-0 (pubk a)))))+  (label 459)+  (parent 144)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 6 1 resp1 2) nc-1 (2 0)+    (enc a b c nc-1 nb-1 nc-1 (pubk d)) (enc a b d nc-1 nb-1 (pubk c))+    (enc a c d nc-1 (pubk b)) (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 460)+  (parent 144)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nb-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-1) (nc nb-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (2 0)) ((2 1) (0 1))+    ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 6 1 resp1 2) nc-1 (2 0)+    (enc a b c nc-1 nb-1 nc-1 (pubk d)) (enc a b d nc-1 nb-1 (pubk c))+    (enc a c d nc-1 (pubk b)) (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nb-0 (pubk d))))+    ((recv (enc a b c nb-0 nb-1 nb-0 (pubk d)))+      (send (enc b c d nb-0 nb-1 nb-0 nd-0 (pubk a)))))+  (label 461)+  (parent 144)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nd-0 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na nc-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (6 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (5 0)) ((5 1) (2 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (added-strand resp2 2) nc-1 (2 0)+    (enc a b c nc-1 nb-1 nc-1 (pubk d)) (enc a b d nc-1 nb-1 (pubk c))+    (enc a c d nc-1 (pubk b)) (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a b c nc-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-2 (pubk d)))))+  (label 462)+  (parent 144)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp2 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))+  (label 463)+  (parent 145)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-0 nd-0 (pubk a)))))+  (label 464)+  (parent 145)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (4 0)) ((0 0) (5 0)) ((1 1) (3 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (3 0)) ((5 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp3 2) nb-0 (0 1)+    (enc a b c nb-0 nb-0 nc-0 (pubk d))+    (enc a b c nb-0 nb-0 nc-1 (pubk d)) (enc a b d nb-0 nb-0 (pubk c))+    (enc a b d nb-0 nb-1 (pubk c)) (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 465)+  (parent 145)+  (unrealized (0 1) (5 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-2 (pubk d)))))+  (label 466)+  (parent 147)+  (unrealized (0 1))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))+  (label 467)+  (parent 147)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 468)+  (parent 148)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 5 resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 469)+  (parent 148)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)+    (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-3) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (4 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (added-strand resp1 2) nb-0 (6 0)+    (enc a c d nb-0 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-3 (pubk c)))))+  (label 470)+  (parent 148)+  (unrealized (0 1) (4 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nc-0 nb-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 3 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))+  (label 471)+  (parent 148)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp2 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-2 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 472)+  (parent 149)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-0) (nc nc-0) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-2 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-0 nc-0 (pubk d)))+      (send (enc b c d nb-1 nb-0 nc-0 nd-0 (pubk a)))))+  (label 473)+  (parent 149)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (6 0))+    ((1 1) (2 0)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (0 1)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp3 2) nb-1 (0 1)+    (enc a b c nb-1 nb-0 nc-0 (pubk d))+    (enc a b c nb-1 nb-1 nc-1 (pubk d)) (enc a b d nb-1 nb-0 (pubk c))+    (enc a b d nb-1 nb-1 (pubk c)) (enc a b d nb-1 nb-2 (pubk c))+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 474)+  (parent 149)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 1 resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 475)+  (parent 151)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 476)+  (parent 151)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((5 1) (6 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 477)+  (parent 151)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nb-3 text)+    (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-3) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (2 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-3 (pubk c)))))+  (label 478)+  (parent 151)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-2 (pubk d)))))+  (label 479)+  (parent 151)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((5 1) (6 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-2 (pubk d)))))+  (label 480)+  (parent 151)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (4 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 7 4 resp2 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-1 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b d nc-1 nb-1 (pubk c)))+      (send (enc a b c nc-1 nb-1 nc-2 (pubk d)))))+  (label 481)+  (parent 151)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 1 resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 482)+  (parent 152)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((3 1) (6 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 483)+  (parent 152)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((5 1) (6 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 484)+  (parent 152)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nd-0 nb-3 text)+    (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-3) (a a) (b b) (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (2 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (added-strand resp1 2) nb-1 (6 0)+    (enc a c d nb-1 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-3 (pubk c)))))+  (label 485)+  (parent 152)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-0) (nb nb-0) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b c nb-0 nb-0 nc-1 (pubk d)))+      (send (enc b c d nb-0 nb-0 nc-1 nd-0 (pubk a)))))+  (label 486)+  (parent 152)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nb-1) (nb nb-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((5 1) (6 0)) ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 5 resp1 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b c nb-1 nb-1 nc-1 (pubk d)))+      (send (enc b c d nb-1 nb-1 nc-1 nd-0 (pubk a)))))+  (label 487)+  (parent 152)+  (unrealized (0 1) (2 0) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nc-1 nb-1 nd-0 text) (a b c d name))+  (defstrand init 3 (na nc-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nc-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nc-1) (nb nc-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nc-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp3 2 (na nc-1) (nb nc-1) (nc nc-1) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (6 0)) ((5 1) (4 0))+    ((6 1) (2 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nc-1)+  (operation nonce-test (displaced 7 4 resp2 2) nb-2 (6 0)+    (enc a c d nb-2 (pubk b)))+  (traces+    ((send (enc a c d nc-1 (pubk b)))+      (recv (enc b c d nc-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-0 (pubk c))))+    ((recv (enc a b d nc-1 nb-0 (pubk c)))+      (send (enc a b c nc-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nc-1 (pubk c))))+    ((recv (enc a b d nc-1 nc-1 (pubk c)))+      (send (enc a b c nc-1 nc-1 nc-1 (pubk d))))+    ((recv (enc a c d nc-1 (pubk b)))+      (send (enc a b d nc-1 nb-1 (pubk c))))+    ((recv (enc a b c nc-1 nc-1 nc-1 (pubk d)))+      (send (enc b c d nc-1 nc-1 nc-1 nd-0 (pubk a)))))+  (label 488)+  (parent 152)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 3 resp1 2) na (6 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 489)+  (parent 153)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 490)+  (parent 153)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) na (6 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 491)+  (parent 153)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-2) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-2)+  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-2 (pubk b)))+      (recv (enc b c d nb-2 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-0 (pubk c))))+    ((recv (enc a b d nb-2 nb-0 (pubk c)))+      (send (enc a b c nb-2 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-1 (pubk c))))+    ((recv (enc a b d nb-2 nb-1 (pubk c)))+      (send (enc a b c nb-2 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-2 (pubk c))))+    ((recv (enc a b d nb-2 nb-2 (pubk c)))+      (send (enc a b c nb-2 nb-2 nc-2 (pubk d)))))+  (label 492)+  (parent 153)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nc-3 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-3) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (6 0)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (6 0)+    (enc a b d na nb-0 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-3 (pubk d)))))+  (label 493)+  (parent 153)+  (unrealized (0 1) (4 0) (6 0) (7 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (5 0)) ((4 1) (2 0)) ((5 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (contracted (nb-2 nb-1)) na (6 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-2 (pubk d)))))+  (label 494)+  (parent 154)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 495)+  (parent 154)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-0) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-0) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-0) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (6 0))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (4 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-0)+  (operation nonce-test (displaced 7 1 resp1 2) na (6 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-0 (pubk b)))+      (recv (enc b c d nb-0 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-0 (pubk c))))+    ((recv (enc a b d nb-0 nb-0 (pubk c)))+      (send (enc a b c nb-0 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-1 (pubk c))))+    ((recv (enc a b d nb-0 nb-1 (pubk c)))+      (send (enc a b c nb-0 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-0 (pubk b)))+      (send (enc a b d nb-0 nb-2 (pubk c))))+    ((recv (enc a b d nb-0 nb-2 (pubk c)))+      (send (enc a b c nb-0 nb-2 nc-2 (pubk d)))))+  (label 496)+  (parent 154)+  (unrealized (0 1) (6 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-2) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-2) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-2) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-2)+  (operation nonce-test (displaced 7 5 resp1 2) na (6 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-2 (pubk b)))+      (recv (enc b c d nb-2 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-0 (pubk c))))+    ((recv (enc a b d nb-2 nb-0 (pubk c)))+      (send (enc a b c nb-2 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-1 (pubk c))))+    ((recv (enc a b d nb-2 nb-1 (pubk c)))+      (send (enc a b c nb-2 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-2 (pubk b)))+      (send (enc a b d nb-2 nb-2 (pubk c))))+    ((recv (enc a b d nb-2 nb-2 (pubk c)))+      (send (enc a b c nb-2 nb-2 nc-2 (pubk d)))))+  (label 497)+  (parent 154)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nc-3 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-3) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (6 0)) ((4 1) (2 0))+    ((5 1) (4 0)) ((6 1) (4 0)) ((7 1) (6 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp2 2) na (6 0)+    (enc a b d na nb-1 (pubk c)) (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-3 (pubk d)))))+  (label 498)+  (parent 154)+  (unrealized (0 1) (2 0) (6 0) (7 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (4 0))+    ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 1 resp1 2) na (4 0)+    (enc a b c na nb-2 nc-2 (pubk d)) (enc a b d na nb-2 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 499)+  (parent 155)+  (unrealized (0 1) (4 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (displaced 7 3 resp1 2) na (4 0)+    (enc a b c na nb-2 nc-2 (pubk d)) (enc a b d na nb-2 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d)))))+  (label 500)+  (parent 155)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 text) (a b c d name))+  (defstrand init 3 (na nb-1) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na nb-1) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na nb-1) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (4 0)) ((4 1) (2 0)) ((5 1) (6 0))+    ((6 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig nb-1)+  (operation nonce-test (displaced 7 3 resp1 2) na (4 0)+    (enc a b c na nb-2 nc-2 (pubk d)) (enc a b d na nb-2 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d nb-1 (pubk b)))+      (recv (enc b c d nb-1 nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-0 (pubk c))))+    ((recv (enc a b d nb-1 nb-0 (pubk c)))+      (send (enc a b c nb-1 nb-0 nc-0 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-1 (pubk c))))+    ((recv (enc a b d nb-1 nb-1 (pubk c)))+      (send (enc a b c nb-1 nb-1 nc-1 (pubk d))))+    ((recv (enc a c d nb-1 (pubk b)))+      (send (enc a b d nb-1 nb-2 (pubk c))))+    ((recv (enc a b d nb-1 nb-2 (pubk c)))+      (send (enc a b c nb-1 nb-2 nc-2 (pubk d)))))+  (label 501)+  (parent 155)+  (unrealized (0 1) (2 0))+  (comment "aborted"))++(defskeleton nsl4cm+  (vars (na nb nc nd nb-0 nc-0 nb-1 nc-1 nb-2 nc-2 nd-0 text)+    (a b c d name))+  (defstrand init 3 (na na) (nb nb) (nc nc) (nd nd) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-0) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-0) (nc nc-0) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-1) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-1) (nc nc-1) (a a) (b b) (c c)+    (d d))+  (defstrand resp1 2 (na na) (nb nb-2) (a a) (b b) (c c) (d d))+  (defstrand resp2 2 (na na) (nb nb-2) (nc nc-2) (a a) (b b) (c c)+    (d d))+  (defstrand resp3 2 (na na) (nb nb-2) (nc nc-2) (nd nd-0) (a a) (b b)+    (c c) (d d))+  (precedes ((0 0) (1 0)) ((0 0) (3 0)) ((0 0) (5 0)) ((0 0) (7 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (2 0)) ((4 1) (2 0))+    ((5 1) (6 0)) ((6 1) (4 0)) ((7 1) (4 0)))+  (non-orig (privk a) (privk b) (privk c) (privk d))+  (uniq-orig na)+  (operation nonce-test (added-strand resp3 2) na (4 0)+    (enc a b c na nb-2 nc-2 (pubk d)) (enc a b d na nb-2 (pubk c))+    (enc a c d na (pubk b)))+  (traces+    ((send (enc a c d na (pubk b)))+      (recv (enc b c d na nb nc nd (pubk a)))+      (send (enc nb nc nd (pubk b))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-0 (pubk c))))+    ((recv (enc a b d na nb-0 (pubk c)))+      (send (enc a b c na nb-0 nc-0 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-1 (pubk c))))+    ((recv (enc a b d na nb-1 (pubk c)))+      (send (enc a b c na nb-1 nc-1 (pubk d))))+    ((recv (enc a c d na (pubk b))) (send (enc a b d na nb-2 (pubk c))))+    ((recv (enc a b d na nb-2 (pubk c)))+      (send (enc a b c na nb-2 nc-2 (pubk d))))+    ((recv (enc a b c na nb-2 nc-2 (pubk d)))+      (send (enc b c d na nb-2 nc-2 nd-0 (pubk a)))))+  (label 502)+  (parent 155)+  (unrealized (0 1) (2 0) (4 0) (7 0))   (comment "aborted"))
tst/nslsk.tst view
@@ -1,6 +1,6 @@ (herald "Needham-Schroeder-Lowe Protocol with symmetric encryption") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol nslsk basic
tst/or.tst view
@@ -1,7 +1,7 @@ (herald "Otway-Rees Protocol"   (comment "Standard version using variables of sort mesg")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol or basic@@ -53,9 +53,8 @@       (send (cat m-0 (enc nb k (ltk b s)) (enc nb-0 k (ltk b-0 s))))))   (label 1)   (parent 0)-  (seen 3)   (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton or   (vars (x y mesg) (nb m na m-0 text) (s a b a-0 name) (k skey))@@ -75,9 +74,8 @@       (send (cat m-0 (enc na k (ltk a-0 s)) (enc nb k (ltk b s))))))   (label 2)   (parent 0)-  (seen 4)   (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton or   (vars (x y mesg) (nb m nb-0 text) (s a name) (k skey))@@ -86,8 +84,8 @@   (precedes ((0 1) (1 0)) ((1 1) (0 2)))   (non-orig (ltk a s))   (uniq-orig nb k)-  (operation encryption-test (added-strand resp 2)-    (enc nb m a a (ltk a s)) (1 0))+  (operation encryption-test (displaced 2 0 resp 2)+    (enc nb m-0 b b (ltk b s)) (1 0))   (traces     ((recv (cat m a a x)) (send (cat m a a x (enc nb m a a (ltk a s))))       (recv (cat m y (enc nb k (ltk a s)))) (send y))@@ -106,8 +104,8 @@   (precedes ((0 1) (1 0)) ((1 1) (0 2)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig nb k)-  (operation encryption-test (added-strand resp 2)-    (enc nb m a b (ltk b s)) (1 0))+  (operation encryption-test (displaced 2 0 resp 2)+    (enc nb m-0 a-0 b (ltk b s)) (1 0))   (traces     ((recv (cat m a b x)) (send (cat m a b x (enc nb m a b (ltk b s))))       (recv (cat m y (enc nb k (ltk b s)))) (send y))@@ -116,7 +114,7 @@       (send (cat m (enc na k (ltk a s)) (enc nb k (ltk b s))))))   (label 4)   (parent 2)-  (seen 7)+  (seen 6)   (unrealized (1 0))   (comment "3 in cohort - 2 not yet seen")) @@ -145,47 +143,45 @@   (origs (k (1 1)) (nb (0 1))))  (defskeleton or-  (vars (x y x-0 mesg) (nb m nb-0 text) (s a name) (k skey))+  (vars (x y mesg) (nb m text) (s a name) (k skey))   (defstrand resp 4 (x x) (y y) (nb nb) (m m) (a a) (b a) (s s) (k k))-  (defstrand serv 2 (na nb) (nb nb-0) (m m) (a a) (b a) (s s) (k k))-  (defstrand resp 2 (x x-0) (nb nb-0) (m m) (a a) (b a) (s s))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (defstrand serv 2 (na nb) (nb nb) (m m) (a a) (b a) (s s) (k k))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))   (non-orig (ltk a s))   (uniq-orig nb k)-  (operation encryption-test (added-strand resp 2)+  (operation encryption-test (displaced 2 0 resp 2)     (enc nb-0 m a a (ltk a s)) (1 0))   (traces     ((recv (cat m a a x)) (send (cat m a a x (enc nb m a a (ltk a s))))       (recv (cat m y (enc nb k (ltk a s)))) (send y))     ((recv-       (cat m a a (enc nb m a a (ltk a s)) (enc nb-0 m a a (ltk a s))))-      (send (cat m (enc nb k (ltk a s)) (enc nb-0 k (ltk a s)))))-    ((recv (cat m a a x-0))-      (send (cat m a a x-0 (enc nb-0 m a a (ltk a s))))))+       (cat m a a (enc nb m a a (ltk a s)) (enc nb m a a (ltk a s))))+      (send (cat m (enc nb k (ltk a s)) (enc nb k (ltk a s))))))   (label 6)   (parent 3)-  (seen 7)   (unrealized)   (shape)   (maps ((0) ((nb nb) (s s) (a a) (b a) (k k) (m m) (x x) (y y))))-  (origs (k (1 1)) (nb (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 1)) (nb (0 1))))  (defskeleton or-  (vars (x y mesg) (nb m text) (s a name) (k skey))+  (vars (x y x-0 mesg) (nb m nb-0 text) (s a name) (k skey))   (defstrand resp 4 (x x) (y y) (nb nb) (m m) (a a) (b a) (s s) (k k))-  (defstrand serv 2 (na nb) (nb nb) (m m) (a a) (b a) (s s) (k k))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (defstrand serv 2 (na nb) (nb nb-0) (m m) (a a) (b a) (s s) (k k))+  (defstrand resp 2 (x x-0) (nb nb-0) (m m) (a a) (b a) (s s))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (1 0)))   (non-orig (ltk a s))   (uniq-orig nb k)-  (operation encryption-test (displaced 2 0 resp 2)+  (operation encryption-test (added-strand resp 2)     (enc nb-0 m a a (ltk a s)) (1 0))   (traces     ((recv (cat m a a x)) (send (cat m a a x (enc nb m a a (ltk a s))))       (recv (cat m y (enc nb k (ltk a s)))) (send y))     ((recv-       (cat m a a (enc nb m a a (ltk a s)) (enc nb m a a (ltk a s))))-      (send (cat m (enc nb k (ltk a s)) (enc nb k (ltk a s))))))+       (cat m a a (enc nb m a a (ltk a s)) (enc nb-0 m a a (ltk a s))))+      (send (cat m (enc nb k (ltk a s)) (enc nb-0 k (ltk a s)))))+    ((recv (cat m a a x-0))+      (send (cat m a a x-0 (enc nb-0 m a a (ltk a s))))))   (label 7)   (parent 3)   (unrealized)@@ -237,11 +233,9 @@       (send (cat m a a x-0 (enc na m a a (ltk a s))))))   (label 9)   (parent 4)-  (seen 7)   (unrealized)   (shape)   (maps ((0) ((nb nb) (s s) (a a) (b a) (k k) (m m) (x x) (y y))))-  (origs (k (1 1)) (nb (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (k (1 1)) (nb (0 1))))  (comment "Nothing left to do")
tst/pca.tst view
@@ -1,7 +1,7 @@ (herald "Privacy Certificate Authority" (bound 15)   (comment "Generation of an Attestation Identity Certificate")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read") (comment "Strand count bounded at 15") @@ -70,6 +70,25 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton pca+  (vars (a t text) (ki kp ke km akey))+  (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))+  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))+  (defstrand tpm 1 (t t) (a a) (ke ke) (ki ki) (km km))+  (precedes ((1 1) (0 0)) ((2 0) (1 0)))+  (non-orig (invk ki) (invk kp) (invk ke) (invk km))+  (uniq-orig ki)+  (operation encryption-test (displaced 3 2 tpm 1)+    (enc t-0 ke-0 (invk km-0)) (1 0))+  (traces ((recv (enc ki a t (invk kp))))+    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))+      (send (enc (enc ki a t (invk kp)) ke)))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))))+  (label 3)+  (parent 2)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton pca   (vars (t a t-0 a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))@@ -86,31 +105,31 @@       (send (enc (enc ki a t (invk kp)) ke)))     ((send (cat (enc ki a (invk ki)) (enc t-0 ke-0 (invk km-0)))))     ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km))))))-  (label 3)+  (label 4)   (parent 2)-  (seen 5)   (unrealized (0 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton pca   (vars (a t text) (ki kp ke km akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 1 (t t) (a a) (ke ke) (ki ki) (km km))-  (precedes ((1 1) (0 0)) ((2 0) (1 0)))+  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))+  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 2) (0 0)))   (non-orig (invk ki) (invk kp) (invk ke) (invk km))   (uniq-orig ki)-  (operation encryption-test (displaced 3 2 tpm 1)-    (enc t-0 ke-0 (invk km-0)) (1 0))+  (operation encryption-test (displaced 2 3 tpm 3)+    (enc ki a t (invk kp)) (0 0) (enc (enc ki a t (invk kp)) ke))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))))-  (label 4)-  (parent 2)-  (seen 6)-  (unrealized (0 0))-  (comment "2 in cohort - 0 not yet seen"))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))+      (recv (enc (enc ki a t (invk kp)) ke))+      (send (enc ki a t (invk kp)))))+  (label 5)+  (parent 3)+  (unrealized (2 1))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton pca   (vars (t a a-0 text) (ki kp ke km ki-0 km-0 akey))@@ -122,8 +141,8 @@   (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)     (invk km-0))   (uniq-orig ki ki-0)-  (operation encryption-test (added-strand tpm 3) (enc ki a t (invk kp))-    (0 0) (enc (enc ki a t (invk kp)) ke))+  (operation encryption-test (displaced 2 4 tpm 3)+    (enc ki a t (invk kp)) (0 0) (enc (enc ki a t (invk kp)) ke))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))@@ -131,60 +150,60 @@     ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp)))))-  (label 5)-  (parent 3)+  (label 6)+  (parent 4)   (unrealized (3 1))   (comment "2 in cohort - 2 not yet seen"))  (defskeleton pca-  (vars (t a text) (ki kp ke km akey))+  (vars (a t text) (ki kp ke km akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 2) (0 0)))+  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 2) (0 0)))   (non-orig (invk ki) (invk kp) (invk ke) (invk km))   (uniq-orig ki)-  (operation encryption-test (displaced 3 4 tpm 3)-    (enc ki a t (invk kp)) (0 0) (enc (enc ki a t (invk kp)) ke))+  (operation encryption-test (displaced 3 1 pca 2)+    (enc ki a t (invk kp)) (2 1))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))     ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp)))))-  (label 6)-  (parent 3)-  (unrealized (2 1))-  (comment "2 in cohort - 2 not yet seen"))+  (label 7)+  (parent 5)+  (unrealized)+  (shape)+  (maps ((0) ((ki ki) (kp kp) (t t) (a a))))+  (origs (ki (2 0))))  (defskeleton pca-  (vars (t a a-0 text) (ki kp ke km ki-0 km-0 ke-0 km-1 akey))+  (vars (a t text) (ki kp ke km ke-0 km-0 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km))-  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))-  (defstrand pca 2 (t t) (a a) (ke ke-0) (ki ki) (km km-1) (kp kp))-  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((3 0) (1 0)) ((3 0) (4 0))-    ((3 2) (0 0)) ((4 1) (3 1)))-  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)-    (invk km-0) (invk ke-0) (invk km-1))-  (uniq-orig ki ki-0)+  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))+  (defstrand pca 2 (t t) (a a) (ke ke-0) (ki ki) (km km-0) (kp kp))+  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))+    ((3 1) (2 1)))+  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ke-0)+    (invk km-0))+  (uniq-orig ki)   (operation encryption-test (added-strand pca 2) (enc ki a t (invk kp))-    (3 1))+    (2 1))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km)))))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp))))-    ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-1))))+    ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-0))))       (send (enc (enc ki a t (invk kp)) ke-0))))-  (label 7)+  (label 8)   (parent 5)-  (seen 8)-  (unrealized (3 1) (4 0))-  (comment "3 in cohort - 2 not yet seen"))+  (seen 7)+  (unrealized (2 1) (3 0))+  (comment "2 in cohort - 1 not yet seen"))  (defskeleton pca   (vars (t a a-0 text) (ki kp ke km ki-0 km-0 akey))@@ -205,28 +224,56 @@     ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp)))))-  (label 8)-  (parent 5)-  (seen 10)+  (label 9)+  (parent 6)   (unrealized)   (shape)   (maps ((0) ((ki ki) (kp kp) (t t) (a a))))-  (origs (ki (3 0)) (ki-0 (2 0)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (ki (3 0)) (ki-0 (2 0))))  (defskeleton pca-  (vars (t a text) (ki kp ke km ke-0 km-0 akey))+  (vars (t a a-0 text) (ki kp ke km ki-0 km-0 ke-0 km-1 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))+  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km))+  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))+  (defstrand pca 2 (t t) (a a) (ke ke-0) (ki ki) (km km-1) (kp kp))+  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((3 0) (1 0)) ((3 0) (4 0))+    ((3 2) (0 0)) ((4 1) (3 1)))+  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)+    (invk km-0) (invk ke-0) (invk km-1))+  (uniq-orig ki ki-0)+  (operation encryption-test (added-strand pca 2) (enc ki a t (invk kp))+    (3 1))+  (traces ((recv (enc ki a t (invk kp))))+    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))+      (send (enc (enc ki a t (invk kp)) ke)))+    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km)))))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))+      (recv (enc (enc ki a t (invk kp)) ke))+      (send (enc ki a t (invk kp))))+    ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-1))))+      (send (enc (enc ki a t (invk kp)) ke-0))))+  (label 10)+  (parent 6)+  (seen 9)+  (unrealized (3 1) (4 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton pca+  (vars (a t a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))+  (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))+  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke-0) (ki ki) (km km-0) (kp kp))+  (defstrand tpm 1 (t t) (a a-0) (ke ke-0) (ki ki-0) (km km-0))   (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))-    ((3 1) (2 1)))+    ((3 1) (2 1)) ((4 0) (3 0)))   (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ke-0)-    (invk km-0))-  (uniq-orig ki)-  (operation encryption-test (added-strand pca 2) (enc ki a t (invk kp))-    (2 1))+    (invk km-0) (invk ki-0))+  (uniq-orig ki ki-0)+  (operation encryption-test (added-strand tpm 1)+    (enc t ke-0 (invk km-0)) (3 0))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))@@ -234,35 +281,40 @@       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-0))))-      (send (enc (enc ki a t (invk kp)) ke-0))))-  (label 9)-  (parent 6)-  (seen 10)-  (unrealized (2 1) (3 0))-  (comment "2 in cohort - 1 not yet seen"))+      (send (enc (enc ki a t (invk kp)) ke-0)))+    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke-0 (invk km-0))))))+  (label 11)+  (parent 8)+  (unrealized (2 1))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton pca-  (vars (t a text) (ki kp ke km akey))+  (vars (t a a-0 text) (ki kp ke km ki-0 km-0 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 2) (0 0)))-  (non-orig (invk ki) (invk kp) (invk ke) (invk km))-  (uniq-orig ki)-  (operation encryption-test (displaced 3 1 pca 2)-    (enc ki a t (invk kp)) (2 1))+  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km))+  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))+  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))+  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((3 0) (1 0)) ((3 0) (4 0))+    ((3 2) (0 0)) ((4 1) (3 1)))+  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)+    (invk km-0))+  (uniq-orig ki ki-0)+  (operation encryption-test (displaced 5 3 tpm 1)+    (enc t ke-0 (invk km-1)) (4 0))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))+    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km)))))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))       (recv (enc (enc ki a t (invk kp)) ke))-      (send (enc ki a t (invk kp)))))-  (label 10)-  (parent 6)+      (send (enc ki a t (invk kp))))+    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))+      (send (enc (enc ki a t (invk kp)) ke))))+  (label 12)+  (parent 10)   (unrealized)-  (shape)-  (maps ((0) ((ki ki) (kp kp) (t t) (a a))))-  (origs (ki (2 0))))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton pca   (vars (t a a-0 a-1 text) (ki kp ke km ki-0 km-0 ke-0 km-1 ki-1 akey))@@ -289,53 +341,54 @@     ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-1))))       (send (enc (enc ki a t (invk kp)) ke-0)))     ((send (cat (enc ki-1 a-1 (invk ki-1)) (enc t ke-0 (invk km-1))))))-  (label 11)-  (parent 7)+  (label 13)+  (parent 10)   (unrealized (3 1))   (comment "2 in cohort - 2 not yet seen"))  (defskeleton pca-  (vars (t a a-0 text) (ki kp ke km ki-0 km-0 akey))+  (vars (a t a-0 text) (ki kp km ke km-0 ki-0 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km))-  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))+  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))-  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((3 0) (1 0)) ((3 0) (4 0))-    ((3 2) (0 0)) ((4 1) (3 1)))-  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)-    (invk km-0))+  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km-0))+  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))+    ((3 1) (2 1)) ((4 0) (3 0)))+  (non-orig (invk ki) (invk kp) (invk km) (invk ke) (invk km-0)+    (invk ki-0))   (uniq-orig ki ki-0)-  (operation encryption-test (displaced 5 3 tpm 1)-    (enc t ke-0 (invk km-1)) (4 0))+  (operation encryption-test (contracted (ke-0 ke))+    (enc ki a t (invk kp)) (2 1) (enc (enc ki a t (invk kp)) ke))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km)))))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))-      (send (enc (enc ki a t (invk kp)) ke))))-  (label 12)-  (parent 7)+      (send (enc (enc ki a t (invk kp)) ke)))+    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km-0))))))+  (label 14)+  (parent 11)+  (seen 9)   (unrealized)-  (comment "1 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 0 not yet seen"))  (defskeleton pca-  (vars (t a a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))+  (vars (a t a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke-0) (ki ki) (km km-0) (kp kp))   (defstrand tpm 1 (t t) (a a-0) (ke ke-0) (ki ki-0) (km km-0))-  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))+  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))     ((3 1) (2 1)) ((4 0) (3 0)))   (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ke-0)     (invk km-0) (invk ki-0))   (uniq-orig ki ki-0)-  (operation encryption-test (added-strand tpm 1)-    (enc t ke-0 (invk km-0)) (3 0))+  (operation encryption-test (displaced 5 1 pca 2)+    (enc ki a t (invk kp)) (2 1) (enc (enc ki a t (invk kp)) ke-0))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))@@ -345,12 +398,36 @@     ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-0))))       (send (enc (enc ki a t (invk kp)) ke-0)))     ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke-0 (invk km-0))))))-  (label 13)-  (parent 9)-  (unrealized (2 1))-  (comment "2 in cohort - 2 not yet seen"))+  (label 15)+  (parent 11)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton pca+  (vars (t a a-0 text) (ki kp ke km ki-0 km-0 akey))+  (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))+  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km))+  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))+  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))+  (precedes ((1 0) (0 0)) ((2 0) (3 0)) ((2 2) (0 0)) ((3 1) (2 1)))+  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)+    (invk km-0))+  (uniq-orig ki ki-0)+  (operation generalization deleted (1 0))+  (traces ((recv (enc ki a t (invk kp))))+    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km)))))+    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))+      (recv (enc (enc ki a t (invk kp)) ke))+      (send (enc ki a t (invk kp))))+    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))+      (send (enc (enc ki a t (invk kp)) ke))))+  (label 16)+  (parent 12)+  (seen 7)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton pca   (vars (t a a-0 a-1 text) (ki kp km ki-0 km-0 ke km-1 ki-1 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))@@ -375,8 +452,8 @@     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-1))))       (send (enc (enc ki a t (invk kp)) ke)))     ((send (cat (enc ki-1 a-1 (invk ki-1)) (enc t ke (invk km-1))))))-  (label 14)-  (parent 11)+  (label 17)+  (parent 13)   (unrealized)   (comment "1 in cohort - 1 not yet seen")) @@ -405,91 +482,34 @@     ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-1))))       (send (enc (enc ki a t (invk kp)) ke-0)))     ((send (cat (enc ki-1 a-1 (invk ki-1)) (enc t ke-0 (invk km-1))))))-  (label 15)-  (parent 11)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton pca-  (vars (t a a-0 text) (ki kp ke km ki-0 km-0 akey))-  (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))-  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km))-  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))-  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))-  (precedes ((1 0) (0 0)) ((2 0) (3 0)) ((2 2) (0 0)) ((3 1) (2 1)))-  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ki-0)-    (invk km-0))-  (uniq-orig ki ki-0)-  (operation generalization deleted (1 0))-  (traces ((recv (enc ki a t (invk kp))))-    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km)))))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))-      (recv (enc (enc ki a t (invk kp)) ke))-      (send (enc ki a t (invk kp))))-    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))-      (send (enc (enc ki a t (invk kp)) ke))))-  (label 16)-  (parent 12)-  (seen 10)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton pca-  (vars (t a a-0 text) (ki kp km ke km-0 ki-0 akey))-  (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))-  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km-0) (kp kp))-  (defstrand tpm 1 (t t) (a a-0) (ke ke) (ki ki-0) (km km-0))-  (precedes ((1 1) (0 0)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))-    ((3 1) (2 1)) ((4 0) (3 0)))-  (non-orig (invk ki) (invk kp) (invk km) (invk ke) (invk km-0)-    (invk ki-0))-  (uniq-orig ki ki-0)-  (operation encryption-test (contracted (ke-0 ke))-    (enc ki a t (invk kp)) (2 1) (enc (enc ki a t (invk kp)) ke))-  (traces ((recv (enc ki a t (invk kp))))-    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))-      (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))-      (recv (enc (enc ki a t (invk kp)) ke))-      (send (enc ki a t (invk kp))))-    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-0))))-      (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke (invk km-0))))))-  (label 17)+  (label 18)   (parent 13)-  (seen 8)   (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton pca-  (vars (t a a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))+  (vars (a t a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))   (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))   (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))   (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand pca 2 (t t) (a a) (ke ke-0) (ki ki) (km km-0) (kp kp))   (defstrand tpm 1 (t t) (a a-0) (ke ke-0) (ki ki-0) (km km-0))-  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 0) (3 0)) ((2 2) (0 0))-    ((3 1) (2 1)) ((4 0) (3 0)))+  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 2) (0 0)) ((3 0) (2 1)))   (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ke-0)     (invk km-0) (invk ki-0))   (uniq-orig ki ki-0)-  (operation encryption-test (displaced 5 1 pca 2)-    (enc ki a t (invk kp)) (2 1) (enc (enc ki a t (invk kp)) ke-0))+  (operation generalization deleted (3 0))   (traces ((recv (enc ki a t (invk kp))))     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (send (enc (enc ki a t (invk kp)) ke)))     ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp))))-    ((recv (cat (enc ki a (invk ki)) (enc t ke-0 (invk km-0))))-      (send (enc (enc ki a t (invk kp)) ke-0)))     ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke-0 (invk km-0))))))-  (label 18)-  (parent 13)+  (label 19)+  (parent 15)+  (seen 7)   (unrealized)-  (comment "1 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 0 not yet seen"))  (defskeleton pca   (vars (t a a-0 a-1 text) (ki kp km ki-0 km-0 ke km-1 ki-1 akey))@@ -512,9 +532,9 @@     ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km-1))))       (send (enc (enc ki a t (invk kp)) ke)))     ((send (cat (enc ki-1 a-1 (invk ki-1)) (enc t ke (invk km-1))))))-  (label 19)-  (parent 14)-  (seen 8)+  (label 20)+  (parent 17)+  (seen 9)   (unrealized)   (comment "1 in cohort - 0 not yet seen")) @@ -539,33 +559,9 @@       (recv (enc (enc ki a t (invk kp)) ke))       (send (enc ki a t (invk kp))))     ((send (cat (enc ki-1 a-1 (invk ki-1)) (enc t ke-0 (invk km-1))))))-  (label 20)-  (parent 15)-  (seen 8)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton pca-  (vars (t a a-0 text) (ki kp ke km ke-0 km-0 ki-0 akey))-  (defstrand appr 1 (t t) (a a) (ki ki) (kp kp))-  (defstrand pca 2 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 3 (t t) (a a) (ke ke) (ki ki) (km km) (kp kp))-  (defstrand tpm 1 (t t) (a a-0) (ke ke-0) (ki ki-0) (km km-0))-  (precedes ((1 1) (2 1)) ((2 0) (1 0)) ((2 2) (0 0)) ((3 0) (2 1)))-  (non-orig (invk ki) (invk kp) (invk ke) (invk km) (invk ke-0)-    (invk km-0) (invk ki-0))-  (uniq-orig ki ki-0)-  (operation generalization deleted (3 0))-  (traces ((recv (enc ki a t (invk kp))))-    ((recv (cat (enc ki a (invk ki)) (enc t ke (invk km))))-      (send (enc (enc ki a t (invk kp)) ke)))-    ((send (cat (enc ki a (invk ki)) (enc t ke (invk km))))-      (recv (enc (enc ki a t (invk kp)) ke))-      (send (enc ki a t (invk kp))))-    ((send (cat (enc ki-0 a-0 (invk ki-0)) (enc t ke-0 (invk km-0))))))   (label 21)   (parent 18)-  (seen 10)+  (seen 9)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/pkinit.tst view
@@ -1,6 +1,6 @@ (herald "Kerberos PK init") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol pkinit basic
tst/print.tst view
@@ -1,7 +1,7 @@ (herald "Print Test"   (comment "See if read forms look like printed ones")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol print-test basic
tst/pruning1.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol prune basic
tst/sigenc.tst view
@@ -1,7 +1,7 @@ (herald "Signed Encrypted Message Example"   (comment "Shows examples of key usage of asymmetric keys")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol mult-keys-sig-enc basic@@ -121,48 +121,46 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 n1-0 text) (a b b-0 b-1 name))+  (vars (n2 n1 text) (a b b-0 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 1 (n1 n1) (a a) (b b-0))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-1))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))   (non-orig (privk "sig" a))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3)+  (operation encryption-test (displaced 1 2 init 3)     (enc n2 (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))-    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-1)))-      (recv (enc (enc n1-0 n2 (privk "sig" b-1)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-1)))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0)))+      (recv (enc (enc n1 n2 (privk "sig" b-0)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0)))))   (label 5)   (parent 4)-  (seen 6)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 1))))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 text) (a b b-0 name))+  (vars (n2 n1 n1-0 text) (a b b-0 b-1 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))-  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))+  (defstrand init 1 (n1 n1) (a a) (b b-0))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-1))+  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))   (non-orig (privk "sig" a))   (uniq-orig n2)-  (operation encryption-test (displaced 1 2 init 3)+  (operation encryption-test (added-strand init 3)     (enc n2 (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0)))-      (recv (enc (enc n1 n2 (privk "sig" b-0)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0)))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))+    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-1)))+      (recv (enc (enc n1-0 n2 (privk "sig" b-1)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-1)))))   (label 6)   (parent 4)   (unrealized)@@ -269,176 +267,174 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 n1-0 text) (a b b-0 b-1 name))+  (vars (n2 n1 text) (a b b-0 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 1 (n1 n1) (a a) (b b-0))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-1))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation encryption-test (added-strand init 3)+  (operation encryption-test (displaced 1 2 init 3)     (enc n2 (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))-    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-1)))-      (recv (enc (enc n1-0 n2 (privk "sig" b-1)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-1)))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0)))+      (recv (enc (enc n1 n2 (privk "sig" b-0)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0)))))   (label 11)   (parent 10)-  (unrealized (2 1))-  (comment "3 in cohort - 3 not yet seen"))+  (unrealized (1 1))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 text) (a b b-0 name))+  (vars (n2 n1 n1-0 text) (a b b-0 b-1 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))-  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))+  (defstrand init 1 (n1 n1) (a a) (b b-0))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-1))+  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation encryption-test (displaced 1 2 init 3)+  (operation encryption-test (added-strand init 3)     (enc n2 (privk "sig" a)) (0 2))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0)))-      (recv (enc (enc n1 n2 (privk "sig" b-0)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0)))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))+    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-1)))+      (recv (enc (enc n1-0 n2 (privk "sig" b-1)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-1)))))   (label 12)   (parent 10)-  (unrealized (1 1))-  (comment "2 in cohort - 2 not yet seen"))+  (unrealized (2 1))+  (comment "3 in cohort - 3 not yet seen"))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 text) (a b b-0 name))+  (vars (n2 n1 text) (a b name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 1 (n1 n1) (a a) (b b-0))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))+  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (contracted (b-1 b) (n1-0 n1)) n2 (2 1)+  (operation nonce-test (contracted (b-0 b)) n2 (1 1)     (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))     ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (recv (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b)))))   (label 13)   (parent 11)-  (seen 16)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 1)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (n2 (0 1))))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 n1-0 text) (a b b-0 b-1 name))+  (vars (n2 n1 text) (a b b-0 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 1 (n1 n1) (a a) (b b-0))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-1))+  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (3 1)) ((1 0) (0 0)) ((2 2) (0 2)) ((3 2) (2 1)))+  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((1 2) (0 2)) ((2 2) (1 1)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (added-strand init 3) n2 (2 1)+  (operation nonce-test (added-strand init 3) n2 (1 1)     (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))-    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-1)))-      (recv (enc (enc n1-0 n2 (privk "sig" b-1)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-1))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0)))+      (recv (enc (enc n1 n2 (privk "sig" b-0)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0))))     ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (recv (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b)))))   (label 14)   (parent 11)-  (seen 13)+  (seen 15)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 n1-0 text) (a b b-0 name))+  (vars (n2 n1 text) (a b b-0 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-0))+  (defstrand init 1 (n1 n1) (a a) (b b-0))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (2 1)) ((1 2) (0 2)) ((2 0) (0 0)) ((2 2) (1 1)))+  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((2 2) (0 2)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (displaced 1 3 init 3) n2 (2 1)+  (operation nonce-test (contracted (b-1 b) (n1-0 n1)) n2 (2 1)     (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-0)))-      (recv (enc (enc n1-0 n2 (privk "sig" b-0)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))     ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (recv (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b)))))   (label 15)-  (parent 11)-  (seen 16)+  (parent 12)   (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (shape)+  (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))+  (origs (n2 (0 1))))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 text) (a b name))+  (vars (n2 n1 n1-0 text) (a b b-0 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-0))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (1 1)) ((1 0) (0 0)) ((1 2) (0 2)))+  (precedes ((0 1) (2 1)) ((1 2) (0 2)) ((2 0) (0 0)) ((2 2) (1 1)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (contracted (b-0 b)) n2 (1 1)+  (operation nonce-test (displaced 1 3 init 3) n2 (2 1)     (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))+    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-0)))+      (recv (enc (enc n1-0 n2 (privk "sig" b-0)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0))))     ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (recv (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b)))))   (label 16)   (parent 12)+  (seen 13)   (unrealized)-  (shape)-  (maps ((0) ((a a) (b b) (n2 n2) (n1 n1))))-  (origs (n2 (0 1))))+  (comment "1 in cohort - 0 not yet seen"))  (defskeleton mult-keys-sig-enc-  (vars (n2 n1 text) (a b b-0 name))+  (vars (n2 n1 n1-0 text) (a b b-0 b-1 name))   (defstrand resp 3 (n2 n2) (n1 n1) (b b) (a a))-  (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b-0))+  (defstrand init 1 (n1 n1) (a a) (b b-0))+  (defstrand init 3 (n1 n1-0) (n2 n2) (a a) (b b-1))   (defstrand init 3 (n1 n1) (n2 n2) (a a) (b b))-  (precedes ((0 1) (2 1)) ((1 0) (0 0)) ((1 2) (0 2)) ((2 2) (1 1)))+  (precedes ((0 1) (3 1)) ((1 0) (0 0)) ((2 2) (0 2)) ((3 2) (2 1)))   (non-orig (privk "enc" a) (privk "sig" a))   (uniq-orig n2)-  (operation nonce-test (added-strand init 3) n2 (1 1)+  (operation nonce-test (added-strand init 3) n2 (2 1)     (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))   (traces     ((recv (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (send (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (recv (enc (enc n2 (privk "sig" a)) (pubk "enc" b))))-    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0)))-      (recv (enc (enc n1 n2 (privk "sig" b-0)) (pubk "enc" a)))-      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-0))))+    ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b-0))))+    ((send (enc (enc n1-0 a (privk "sig" a)) (pubk "enc" b-1)))+      (recv (enc (enc n1-0 n2 (privk "sig" b-1)) (pubk "enc" a)))+      (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b-1))))     ((send (enc (enc n1 a (privk "sig" a)) (pubk "enc" b)))       (recv (enc (enc n1 n2 (privk "sig" b)) (pubk "enc" a)))       (send (enc (enc n2 (privk "sig" a)) (pubk "enc" b)))))   (label 17)   (parent 12)-  (seen 13)+  (seen 15)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/sorted_epmo_acctnum.scm view
@@ -1,5 +1,5 @@ (herald "Electronic Purchase with Money Order Protocol Variant"-  (displacement)+  (bound 12)   (comment "This version includes account numbers in exchanges" 	   "This version uses sorts to avoid confusion" 	   "between a nonce and other data"))
tst/sorted_epmo_acctnum.tst view
@@ -1,1642 +1,24729 @@ (herald "Electronic Purchase with Money Order Protocol Variant"-  (displacement)-  (comment "This version includes account numbers in exchanges"-    "This version uses sorts to avoid confusion"-    "between a nonce and other data"))--(comment "CPSA 2.2.8")-(comment "All input read")-(comment "Displacement disabled")--(defprotocol sorted_epmo_acctnum basic-  (defrole bank-    (vars (b c m name) (acctnum price text) (hash name) (nc nm nb data))-    (trace (recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    (non-orig (privk hash))-    (annotations b-      (1-        (forall ((pm name))-          (implies-            (and (authtransfer c acctnum b price pm nm)-              (reqtransfer pm b price pm nm))-            (dotransfer acctnum b price pm nm))))-      (2-        (and (says c (authtransfer c acctnum b price m nm))-          (says m (reqtransfer m b price m nm))))))-  (defrole customer-    (vars (b c m hash name) (acctnum goods price text) (nc nm nb data))-    (trace (send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    (non-orig (privk b) (privk hash))-    (uniq-orig nc)-    (annotations c-      (1-        (says m-          (implies-            (exists ((acctnum2 text))-              (dotransfer acctnum2 b price m nm)) (doship m goods c))))-      (3-        (says b-          (forall ((pm name))-            (implies-              (and (authtransfer c acctnum b price m nm)-                (reqtransfer pm b price pm nm))-              (dotransfer acctnum b price pm nm)))))-      (4 (authtransfer c acctnum b price m nm))))-  (defrole merchant-    (vars (b c m hash name) (goods price text) (nc nm nb data))-    (trace (recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    (non-orig (privk hash))-    (uniq-orig nm)-    (annotations m-      (1-        (implies-          (exists ((acctnum2 text)) (dotransfer acctnum2 b price m nm))-          (doship m goods c)))-      (2-        (and-          (says b-            (forall ((pm name))-              (exists ((acctnum2 text))-                (implies-                  (and (authtransfer c acctnum2 b price m nm)-                    (reqtransfer pm b price pm nm))-                  (dotransfer acctnum2 b price pm nm)))))-          (says c-            (exists ((acctnum2 text))-              (authtransfer c acctnum2 b price m nm)))))-      (3 (and (reqtransfer m b price m nm) (doship m goods c))))))--(defskeleton sorted_epmo_acctnum-  (vars (goods price text) (nm nc nb data) (b m c hash name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nc nb)-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))-  (label 0)-  (unrealized (0 2))-  (origs (nm (0 1)))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum text) (nm nc nb data) (b m c hash name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nc nb)-  (operation encryption-test (added-strand bank 2)-    (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b)) (0 2))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))))-  (label 1)-  (parent 0)-  (unrealized (0 2) (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum acctnum-0 goods-0 text) (nm nc nb data)-    (b m c hash b-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (b b-0) (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0))-  (uniq-orig nm nc nb)-  (operation nonce-test (added-strand customer 3) nm (1 0)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b-0)))))-  (label 2)-  (parent 1)-  (unrealized (0 0) (0 2) (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum goods-0 text) (nm nc nb data)-    (m c hash b name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (1 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b))-  (uniq-orig nm nc nb)-  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nm-    (1 0) (enc nc nm m price (pubk c))-    (enc c nc nm acctnum price (pubk b)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))))-  (label 3)-  (parent 2)-  (unrealized (0 0) (0 2))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum acctnum-0 goods-0 text)-    (nm nc nb nb-0 data) (b m c hash b-0 hash-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (b b-0) (c c) (m m))-  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b-0) (c c) (hash hash-0))-  (precedes ((0 1) (2 1)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 0) (0 0))-    ((2 2) (1 0)) ((3 1) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)-    (privk hash-0))-  (uniq-orig nm nc nb)-  (operation nonce-test (added-strand bank 2) nm (1 0)-    (enc nc nm m price (pubk c))-    (enc c nc nm acctnum-0 price (pubk b-0)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b-0))))-    ((recv (enc c nc nm acctnum-0 price (pubk b-0)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0))-            (privk b-0)) (enc nc nb-0 (pubk c))))))-  (label 4)-  (parent 2)-  (unrealized (0 0) (0 2) (1 0) (3 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods text) (nm nc nb data) (m c hash b name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (1 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b))-  (uniq-orig nm nc nb)-  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)-    (enc c nc goods (pubk m)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))))-  (label 5)-  (parent 3)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum goods-0 price-0 text) (nm nc nb nm-0 data)-    (m c hash b name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc)-    (nm nm-0) (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (3 0)) ((2 2) (1 0))-    ((3 1) (0 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b))-  (uniq-orig nm nc nb nm-0)-  (operation nonce-test (added-strand merchant 2) nc (0 0)-    (enc c nc goods-0 (pubk m)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b))))-    ((recv (enc c nc goods-0 (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 6)-  (parent 3)-  (unrealized (0 0) (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum acctnum-0 goods-0 text)-    (nm nc nb nb-0 data) (b m c hash b-0 hash-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (b b-0) (c c) (m m))-  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b-0) (c c) (hash hash-0))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))-    ((3 1) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)-    (privk hash-0))-  (uniq-orig nm nc nb)-  (operation nonce-test (added-strand customer 3) nm (3 0)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b-0))))-    ((recv (enc c nc nm acctnum-0 price (pubk b-0)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0))-            (privk b-0)) (enc nc nb-0 (pubk c))))))-  (label 7)-  (parent 4)-  (unrealized (0 0) (0 2) (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods text) (nm nc nb data) (c hash b m name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (2 1)) ((1 1) (2 3)) ((2 0) (0 0)) ((2 2) (1 0))-    ((2 4) (0 2)))-  (non-orig (privk c) (privk hash) (privk b) (privk m))-  (uniq-orig nm nc nb)-  (operation nonce-test (added-strand customer 5) nb (0 2)-    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 8)-  (parent 5)-  (unrealized)-  (shape)-  (maps-    ((0)-      ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)-        (goods goods) (price price))))-  (origs (nc (2 0)) (nm (0 1)) (nb (1 1))))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods price-0 text) (nm nc nb nm-0 data)-    (m c hash b name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (3 0)) ((2 2) (1 0))-    ((3 1) (0 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b))-  (uniq-orig nm nc nb nm-0)-  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)-    (enc nc nm-0 m price-0 (pubk c)) (enc c nc goods (pubk m)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 9)-  (parent 6)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum goods-0 text) (nm nc nb nb-0 data)-    (m c hash b hash-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))-    ((3 1) (1 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))-  (uniq-orig nm nc nb)-  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nm-    (1 0) (enc "hash" c nc nb-0 nm price (pubk hash-0))-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 10)-  (parent 7)-  (unrealized (0 0) (0 2))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price price-0 acctnum goods text) (nm nc nb nm-0 data)-    (c hash b m name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (3 1)) ((1 1) (3 3)) ((2 1) (0 0)) ((3 0) (2 0))-    ((3 2) (1 0)) ((3 4) (0 2)))-  (non-orig (privk c) (privk hash) (privk b) (privk m))-  (uniq-orig nm nc nb nm-0)-  (operation nonce-test (added-strand customer 5) nb (0 2)-    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 11)-  (parent 9)-  (seen 8)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods text) (nm nc nb nb-0 data)-    (m c hash b hash-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))-    ((3 1) (1 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))-  (uniq-orig nm nc nb)-  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)-    (enc c nc goods (pubk m)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 12)-  (parent 10)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (goods price acctnum goods-0 price-0 text)-    (nm nc nb nb-0 nm-0 data) (m c hash b hash-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc)-    (nm nm-0) (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (4 0)) ((2 2) (3 0))-    ((3 1) (1 0)) ((4 1) (0 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))-  (uniq-orig nm nc nb nm-0)-  (operation nonce-test (added-strand merchant 2) nc (0 0)-    (enc c nc goods-0 (pubk m)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c)))))-    ((recv (enc c nc goods-0 (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 13)-  (parent 10)-  (unrealized (0 0) (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods text) (nm nc nb nb-0 data)-    (c hash hash-0 b m name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (3 1)) ((1 1) (3 3)) ((2 1) (1 0)) ((3 0) (0 0))-    ((3 2) (2 0)) ((3 4) (0 2)))-  (non-orig (privk c) (privk hash) (privk hash-0) (privk b) (privk m))-  (uniq-orig nm nc nb)-  (operation nonce-test (added-strand customer 5) nb (0 2)-    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c)))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 14)-  (parent 12)-  (seen 8)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods price-0 text) (nm nc nb nb-0 nm-0 data)-    (m c hash b hash-0 name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (b b) (c c) (m m))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (4 0)) ((2 2) (3 0))-    ((3 1) (1 0)) ((4 1) (0 0)))-  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))-  (uniq-orig nm nc nb nm-0)-  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)-    (enc nc nm-0 m price-0 (pubk c)) (enc c nc goods (pubk m)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c)))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 15)-  (parent 13)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price price-0 acctnum goods text) (nm nc nb nb-0 nm-0 data)-    (c hash hash-0 b m name))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (4 1)) ((1 1) (4 3)) ((2 1) (1 0)) ((3 1) (0 0))-    ((4 0) (3 0)) ((4 2) (2 0)) ((4 4) (0 2)))-  (non-orig (privk c) (privk hash) (privk hash-0) (privk b) (privk m))-  (uniq-orig nm nc nb nm-0)-  (operation nonce-test (added-strand customer 5) nb (0 2)-    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))-  (traces-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c)))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c)))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 16)-  (parent 15)-  (seen 11)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(comment "Nothing left to do")--(defprotocol sorted_epmo_acctnum basic-  (defrole bank-    (vars (b c m name) (acctnum price text) (hash name) (nc nm nb data))-    (trace (recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    (non-orig (privk hash))-    (annotations b-      (1-        (forall ((pm name))-          (implies-            (and (authtransfer c acctnum b price pm nm)-              (reqtransfer pm b price pm nm))-            (dotransfer acctnum b price pm nm))))-      (2-        (and (says c (authtransfer c acctnum b price m nm))-          (says m (reqtransfer m b price m nm))))))-  (defrole customer-    (vars (b c m hash name) (acctnum goods price text) (nc nm nb data))-    (trace (send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    (non-orig (privk b) (privk hash))-    (uniq-orig nc)-    (annotations c-      (1-        (says m-          (implies-            (exists ((acctnum2 text))-              (dotransfer acctnum2 b price m nm)) (doship m goods c))))-      (3-        (says b-          (forall ((pm name))-            (implies-              (and (authtransfer c acctnum b price m nm)-                (reqtransfer pm b price pm nm))-              (dotransfer acctnum b price pm nm)))))-      (4 (authtransfer c acctnum b price m nm))))-  (defrole merchant-    (vars (b c m hash name) (goods price text) (nc nm nb data))-    (trace (recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    (non-orig (privk hash))-    (uniq-orig nm)-    (annotations m-      (1-        (implies-          (exists ((acctnum2 text)) (dotransfer acctnum2 b price m nm))-          (doship m goods c)))-      (2-        (and-          (says b-            (forall ((pm name))-              (exists ((acctnum2 text))-                (implies-                  (and (authtransfer c acctnum2 b price m nm)-                    (reqtransfer pm b price pm nm))-                  (dotransfer acctnum2 b price pm nm)))))-          (says c-            (exists ((acctnum2 text))-              (authtransfer c acctnum2 b price m nm)))))-      (3 (and (reqtransfer m b price m nm) (doship m goods c))))))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price text) (nm nb nc data) (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))-  (label 17)-  (unrealized (0 2))-  (origs (nb (0 1)))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price goods price-0 text) (nm nb nc nc-0 data)-    (b m c hash c-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price-0) (nc nc-0) (nm nm)-    (nb nb) (b b) (c c-0) (m m) (hash hash))-  (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (operation encryption-test (added-strand merchant 4)-    (enc (enc "hash" b m nb nm (pubk hash)) (privk m)) (0 2))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c-0 nc-0 goods (pubk m)))-      (send (enc nc-0 nm m price-0 (pubk c-0)))-      (recv-        (cat-          (enc (enc "hash" c-0 nc-0 nb nm price-0 (pubk hash))-            (privk b)) nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))-  (label 18)-  (parent 17)-  (unrealized (1 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price goods text) (nm nb nc data) (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (operation encryption-test (added-strand bank 2)-    (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b)) (1 2))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))-  (label 19)-  (parent 18)-  (unrealized (0 0) (1 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price goods acctnum-0 goods-0 text) (nm nb nc data)-    (b m c hash b-0 m-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (nb nb) (b b-0) (c c) (m m-0)-    (hash hash))-  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))-    ((2 0) (1 0)) ((2 4) (1 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0))-  (uniq-orig nm nb nc)-  (operation nonce-test (added-strand customer 5) nb (1 2)-    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods-0 (pubk m-0)))-      (recv (enc nc nm m-0 price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b-0)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))-          nb))))-  (label 20)-  (parent 19)-  (unrealized (0 0) (2 1) (2 3))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price goods acctnum-0 goods-0 text) (nm nb nc data)-    (b m c hash b-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (nb nb) (b b-0) (c c) (m m)-    (hash hash))-  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))-    ((2 0) (1 0)) ((2 4) (1 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0))-  (uniq-orig nm nb nc)-  (operation nonce-test (contracted (m-0 m)) nm (2 1)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b-0)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))-          nb))))-  (label 21)-  (parent 20)-  (unrealized (0 0) (1 0) (2 3))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price goods acctnum-0 goods-0 text) (nm nb nc data)-    (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))-    ((2 0) (1 0)) ((2 4) (1 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (operation encryption-test (added-strand bank 2)-    (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b)) (2 3))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 22)-  (parent 21)-  (unrealized (0 0) (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods text) (nm nb nc data)-    (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))-    ((2 0) (1 0)) ((2 4) (1 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (operation nonce-test (contracted (goods-0 goods)) nc (1 0)-    (enc c nc goods (pubk m)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 23)-  (parent 22)-  (unrealized (0 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price goods acctnum-0 goods-0 price-0 text)-    (nm nb nc nm-0 data) (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)-    (price price) (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc)-    (nm nm-0) (c c) (m m))-  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))-    ((2 0) (3 0)) ((2 4) (1 2)) ((3 1) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (added-strand merchant 2) nc (1 0)-    (enc c nc goods-0 (pubk m)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods-0 (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods-0 (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 24)-  (parent 22)-  (unrealized (0 0) (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods text) (nm nb nc data)-    (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))-    ((2 2) (0 0)) ((2 4) (1 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (operation nonce-test (added-strand customer 3) nm (0 0)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 25)-  (parent 23)-  (unrealized (0 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods price-0 text)-    (nm nb nc nm-0 data) (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))-    ((2 0) (3 0)) ((2 4) (1 2)) ((3 1) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (contracted (goods-0 goods)) nc (1 0)-    (enc nc nm-0 m price-0 (pubk c)) (enc c nc goods (pubk m)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 26)-  (parent 24)-  (unrealized (0 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods text) (nm nb nc data) (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))-    ((2 2) (0 0)) ((2 4) (1 2)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc)-  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))))-  (label 27)-  (parent 25)-  (unrealized)-  (shape)-  (maps-    ((0)-      ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)-        (acctnum acctnum) (price price))))-  (origs (nc (2 0)) (nm (1 1)) (nb (0 1))))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods text) (nm nb nc nb-0 data)-    (b m c hash hash-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 1) (3 0)) ((1 3) (0 2))-    ((2 0) (1 0)) ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (0 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))-  (uniq-orig nm nb nc)-  (operation nonce-test (added-strand bank 2) nm (0 0)-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum-0 price (pubk b)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc nm acctnum-0 price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 28)-  (parent 25)-  (unrealized (0 0) (3 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods price-0 text)-    (nm nb nc nm-0 data) (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))-    ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (added-strand customer 3) nm (0 0)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 29)-  (parent 26)-  (unrealized (0 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods text) (nm nb nc nb-0 data)-    (b m c hash hash-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))-    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))-  (uniq-orig nm nb nc)-  (operation nonce-test (added-strand customer 3) nm (3 0)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc nm acctnum-0 price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 30)-  (parent 28)-  (unrealized (0 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods price-0 text) (nm nb nc nm-0 data)-    (b m c hash name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))-    ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c)))))-  (label 31)-  (parent 29)-  (seen 27)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods price-0 text)-    (nm nb nc nm-0 nb-0 data) (b m c hash hash-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 1) (4 0)) ((1 3) (0 2))-    ((2 0) (3 0)) ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0))-    ((4 1) (0 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (added-strand bank 2) nm (0 0)-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum-0 price (pubk b)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c))))-    ((recv (enc c nc nm acctnum-0 price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 32)-  (parent 29)-  (unrealized (0 0) (4 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods text) (nm nb nc nb-0 data)-    (b m c hash hash-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))-    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))-  (uniq-orig nm nb nc)-  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)-    (enc "hash" c nc nb-0 nm price (pubk hash-0))-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 33)-  (parent 30)-  (seen 27)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (acctnum price acctnum-0 goods price-0 text)-    (nm nb nc nm-0 nb-0 data) (b m c hash hash-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))-    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (0 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (added-strand customer 3) nm (4 0)-    (enc nc nm m price (pubk c)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum-0 price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c))))-    ((recv (enc c nc nm acctnum-0 price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 34)-  (parent 32)-  (unrealized (0 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton sorted_epmo_acctnum-  (vars (price acctnum goods price-0 text) (nm nb nc nm-0 nb-0 data)-    (b m c hash hash-0 name))-  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)-    (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)-    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))-  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)-    (c c) (m m))-  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)-    (nb nb-0) (b b) (c c) (hash hash-0))-  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))-    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (0 0)))-  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))-  (uniq-orig nm nb nc nm-0)-  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)-    (enc "hash" c nc nb-0 nm price (pubk hash-0))-    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))-  (traces-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm m price (pubk c)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb))-      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))-    ((send (enc c nc goods (pubk m)))-      (recv (enc nc nm m price (pubk c)))-      (send (enc c nc nm acctnum price (pubk b)))-      (recv-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          (enc nc nb (pubk c))))-      (send-        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))-          nb)))-    ((recv (enc c nc goods (pubk m)))-      (send (enc nc nm-0 m price-0 (pubk c))))-    ((recv (enc c nc nm acctnum price (pubk b)))-      (send-        (cat-          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))-          (enc nc nb-0 (pubk c))))))-  (label 35)-  (parent 34)-  (seen 33)+  (bound 12)+  (comment "This version includes account numbers in exchanges"+    "This version uses sorts to avoid confusion"+    "between a nonce and other data"))++(comment "CPSA 2.2.9")+(comment "All input read")+(comment "Strand count bounded at 12")++(defprotocol sorted_epmo_acctnum basic+  (defrole bank+    (vars (b c m name) (acctnum price text) (hash name) (nc nm nb data))+    (trace (recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    (non-orig (privk hash))+    (annotations b+      (1+        (forall ((pm name))+          (implies+            (and (authtransfer c acctnum b price pm nm)+              (reqtransfer pm b price pm nm))+            (dotransfer acctnum b price pm nm))))+      (2+        (and (says c (authtransfer c acctnum b price m nm))+          (says m (reqtransfer m b price m nm))))))+  (defrole customer+    (vars (b c m hash name) (acctnum goods price text) (nc nm nb data))+    (trace (send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    (non-orig (privk b) (privk hash))+    (uniq-orig nc)+    (annotations c+      (1+        (says m+          (implies+            (exists ((acctnum2 text))+              (dotransfer acctnum2 b price m nm)) (doship m goods c))))+      (3+        (says b+          (forall ((pm name))+            (implies+              (and (authtransfer c acctnum b price m nm)+                (reqtransfer pm b price pm nm))+              (dotransfer acctnum b price pm nm)))))+      (4 (authtransfer c acctnum b price m nm))))+  (defrole merchant+    (vars (b c m hash name) (goods price text) (nc nm nb data))+    (trace (recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    (non-orig (privk hash))+    (uniq-orig nm)+    (annotations m+      (1+        (implies+          (exists ((acctnum2 text)) (dotransfer acctnum2 b price m nm))+          (doship m goods c)))+      (2+        (and+          (says b+            (forall ((pm name))+              (exists ((acctnum2 text))+                (implies+                  (and (authtransfer c acctnum2 b price m nm)+                    (reqtransfer pm b price pm nm))+                  (dotransfer acctnum2 b price pm nm)))))+          (says c+            (exists ((acctnum2 text))+              (authtransfer c acctnum2 b price m nm)))))+      (3 (and (reqtransfer m b price m nm) (doship m goods c))))))++(defskeleton sorted_epmo_acctnum+  (vars (goods price text) (nm nc nb data) (b m c hash name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nc nb)+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))+  (label 0)+  (unrealized (0 2))+  (origs (nm (0 1)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum text) (nm nc nb data) (b m c hash name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nc nb)+  (operation encryption-test (added-strand bank 2)+    (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b)) (0 2))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))))+  (label 1)+  (parent 0)+  (unrealized (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nm nc nb data)+    (b m c hash b-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (b b-0) (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0))+  (uniq-orig nm nc nb)+  (operation nonce-test (added-strand customer 3) nm (1 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b-0)))))+  (label 2)+  (parent 1)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nm nc nb data)+    (m c hash b name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b))+  (uniq-orig nm nc nb)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nm+    (1 0) (enc nc nm m price (pubk c))+    (enc c nc nm acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))))+  (label 3)+  (parent 2)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nm nc nb nb-0 data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (b b-0) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 0) (0 0))+    ((2 2) (1 0)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nm nc nb)+  (operation nonce-test (added-strand bank 2) nm (1 0)+    (enc nc nm m price (pubk c))+    (enc c nc nm acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b-0))))+    ((recv (enc c nc nm acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 4)+  (parent 2)+  (unrealized (0 0) (0 2) (1 0) (3 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nm nc nb data) (m c hash b name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b))+  (uniq-orig nm nc nb)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))))+  (label 5)+  (parent 3)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nm nc nb nm-0 data)+    (m c hash b name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc)+    (nm nm-0) (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (3 0)) ((2 2) (1 0))+    ((3 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b))+  (uniq-orig nm nc nb nm-0)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 6)+  (parent 3)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nm nc nb nb-0 data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (b b-0) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nm nc nb)+  (operation nonce-test (displaced 4 2 customer 3) nm (3 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b-0))))+    ((recv (enc c nc nm acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 7)+  (parent 4)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nm nc nb data) (c hash b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (2 1)) ((1 1) (2 3)) ((2 0) (0 0)) ((2 2) (1 0))+    ((2 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk b) (privk m))+  (uniq-orig nm nc nb)+  (operation nonce-test (displaced 2 3 customer 5) nb (0 2)+    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 8)+  (parent 5)+  (unrealized)+  (shape)+  (maps+    ((0)+      ((b b) (m m) (c c) (nm nm) (nc nc) (nb nb) (hash hash)+        (goods goods) (price price))))+  (origs (nc (2 0)) (nm (0 1)) (nb (1 1))))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nm nc nb nm-0 data)+    (m c hash b name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (3 0)) ((2 2) (1 0))+    ((3 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b))+  (uniq-orig nm nc nb nm-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm-0 m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 9)+  (parent 6)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nm nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nm nc nb)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nm+    (1 0) (enc "hash" c nc nb-0 nm price (pubk hash-0))+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 10)+  (parent 7)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (b b-0) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 4 3 bank 2) nm (1 0)+    (enc "hash" c nc nb-0 nm price (pubk hash-0))+    (enc nc nm m price (pubk c))+    (enc c nc nm acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 11)+  (parent 7)+  (unrealized (0 0) (0 2) (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price price-0 acctnum goods text) (nm nc nb nm-0 data)+    (c hash b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (3 1)) ((1 1) (3 3)) ((2 1) (0 0)) ((3 0) (2 0))+    ((3 2) (1 0)) ((3 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk b) (privk m))+  (uniq-orig nm nc nb nm-0)+  (operation nonce-test (displaced 2 4 customer 5) nb (0 2)+    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 12)+  (parent 9)+  (seen 8)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nm nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nm nc nb)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 13)+  (parent 10)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nm nc nb nb-0 nm-0 data) (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc)+    (nm nm-0) (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (4 0)) ((2 2) (3 0))+    ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nm nc nb nm-0)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 14)+  (parent 10)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nb-0+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 15)+  (parent 11)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (b b-0) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((0 1) (4 0)) ((1 1) (0 2)) ((2 0) (0 0))+    ((2 2) (3 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 16)+  (parent 11)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 2 4 customer 5) nb-0 (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 17)+  (parent 11)+  (unrealized (0 0) (0 2) (1 0) (3 3))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nm nc nb nb-0 data)+    (c hash hash-0 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (3 1)) ((1 1) (3 3)) ((2 1) (1 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk b) (privk m))+  (uniq-orig nm nc nb)+  (operation nonce-test (displaced 2 4 customer 5) nb (0 2)+    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 18)+  (parent 13)+  (seen 8)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nm nc nb nb-0 nm-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (4 0)) ((2 2) (3 0))+    ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nm nc nb nm-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm-0 m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 19)+  (parent 14)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 20)+  (parent 15)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (4 0)) ((2 2) (3 0))+    ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 21)+  (parent 15)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (b b-0) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (4 0)) ((4 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 5 3 bank 2) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 22)+  (parent 16)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (b b-0) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((2 2) (4 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 5 2 customer 3) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 23)+  (parent 16)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (displaced 4 2 bank 2)+    (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0)) (privk b-0))+    (3 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 24)+  (parent 17)+  (unrealized (0 0) (0 2) (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (3 1)) ((0 1) (4 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (added-strand bank 2)+    (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0)) (privk b-0))+    (3 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 25)+  (parent 17)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price price-0 acctnum goods text) (nm nc nb nb-0 nm-0 data)+    (c hash hash-0 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (4 1)) ((1 1) (4 3)) ((2 1) (1 0)) ((3 1) (0 0))+    ((4 0) (3 0)) ((4 2) (2 0)) ((4 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk b) (privk m))+  (uniq-orig nm nc nb nm-0)+  (operation nonce-test (displaced 2 5 customer 5) nb (0 2)+    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 26)+  (parent 19)+  (seen 12)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 data)+    (c hash hash-0 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (3 1)) ((1 1) (3 3)) ((2 1) (1 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk b) (privk m))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 2 4 customer 5) nb (0 2)+    (enc "hash" c nc nb nb-0 price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))))+  (label 27)+  (parent 20)+  (seen 8)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (4 0)) ((2 2) (3 0))+    ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 28)+  (parent 21)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (4 0)) ((4 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nb-0+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 29)+  (parent 22)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 2 5 customer 5) nb-0 (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 30)+  (parent 22)+  (unrealized (0 0) (0 2) (1 0) (4 3))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((2 2) (4 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nb-0+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 31)+  (parent 23)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 2 5 customer 5) nb-0 (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 32)+  (parent 23)+  (unrealized (0 0) (0 2) (1 0) (4 3))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 33)+  (parent 24)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((0 1) (4 0)) ((1 1) (0 2)) ((2 1) (3 3))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 34)+  (parent 24)+  (seen 41 46)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "2 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (0 0))+    ((3 0) (4 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 35)+  (parent 24)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 5 2 bank 2) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 36)+  (parent 25)+  (seen 42)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (4 0)) ((3 4) (1 0)) ((4 1) (3 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 5 3 customer 3) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 37)+  (parent 25)+  (seen 24 36)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price price-0 acctnum goods text) (nc nb nb-0 nm data)+    (c hash hash-0 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (4 1)) ((1 1) (4 3)) ((2 1) (1 0)) ((3 1) (0 0))+    ((4 0) (3 0)) ((4 2) (2 0)) ((4 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk b) (privk m))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (displaced 2 5 customer 5) nb (0 2)+    (enc "hash" c nc nb nb-0 price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))))+  (label 38)+  (parent 28)+  (seen 12)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((3 1) (4 0)) ((4 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 39)+  (parent 29)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (5 0)) ((2 2) (3 0))+    ((3 1) (4 0)) ((4 1) (1 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 40)+  (parent 29)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (displaced 5 2 bank 2)+    (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0)) (privk b-0))+    (4 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 41)+  (parent 30)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (displaced 5 3 bank 2)+    (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-1)) (privk b-0))+    (4 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 42)+  (parent 30)+  (unrealized (0 0) (0 2) (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (added-strand bank 2)+    (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0)) (privk b-0))+    (4 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 43)+  (parent 30)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (3 0))+    ((2 2) (4 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 44)+  (parent 31)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (5 0)) ((2 2) (3 0))+    ((2 2) (4 0)) ((3 1) (1 0)) ((4 1) (1 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 45)+  (parent 31)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (displaced 5 2 bank 2)+    (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0)) (privk b-0))+    (4 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 46)+  (parent 32)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (displaced 5 3 bank 2)+    (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-1)) (privk b-0))+    (4 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0))))+  (label 47)+  (parent 32)+  (seen 33 34 35)+  (unrealized (0 0) (0 2) (1 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation encryption-test (added-strand bank 2)+    (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0)) (privk b-0))+    (4 3))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 48)+  (parent 32)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 49)+  (parent 33)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (4 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 50)+  (parent 33)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (0 0))+    ((3 0) (4 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 51)+  (parent 35)+  (seen 49 50)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (3 3))+    ((3 0) (0 0)) ((3 0) (4 0)) ((3 2) (2 0)) ((3 4) (1 0))+    ((4 1) (1 0)) ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 52)+  (parent 35)+  (seen 58 68)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (4 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 53)+  (parent 36)+  (unrealized (0 0) (0 2) (1 0) (4 0) (5 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 2) (4 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 54)+  (parent 37)+  (seen 73)+  (unrealized (0 0) (0 2) (1 0) (4 0) (5 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (c hash hash-0 hash-1 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (4 1)) ((1 1) (4 3)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk hash-1)+    (privk b) (privk m))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 2 5 customer 5) nb (0 2)+    (enc "hash" c nc nb nb-0 price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))))+  (label 55)+  (parent 39)+  (seen 18)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (5 0)) ((2 2) (3 0))+    ((3 1) (4 0)) ((4 1) (1 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 56)+  (parent 40)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 57)+  (parent 41)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 58)+  (parent 41)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 59)+  (parent 42)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 60)+  (parent 42)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm data) (b m c hash b-0 hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 61)+  (parent 42)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 2 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 62)+  (parent 43)+  (seen 63 73 82)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 bank 2) nb-1 (5 0)+    (enc nc nb-1 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 63)+  (parent 43)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 4 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 64)+  (parent 43)+  (seen 62 63 73)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "6 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (c hash hash-0 hash-1 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (4 1)) ((1 1) (4 3)) ((2 1) (1 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk hash-1)+    (privk b) (privk m))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 2 5 customer 5) nb (0 2)+    (enc "hash" c nc nb nb-0 price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))))+  (label 65)+  (parent 44)+  (seen 18)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 3 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (b b) (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (5 0)) ((2 2) (3 0))+    ((2 2) (4 0)) ((3 1) (1 0)) ((4 1) (1 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 66)+  (parent 45)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 67)+  (parent 46)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 68)+  (parent 46)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 2 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 69)+  (parent 48)+  (seen 74 84)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 bank 2) nb-1 (5 0)+    (enc nc nb-1 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 70)+  (parent 48)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 2) (5 0))+    ((4 4) (1 0)) ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 4 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 71)+  (parent 48)+  (seen 46 69 70 75)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "6 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (3 3)) ((3 0) (4 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 72)+  (parent 50)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 2 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 73)+  (parent 53)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 74)+  (parent 53)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 75)+  (parent 54)+  (seen 70 74)+  (unrealized (0 0) (0 2) (1 0) (4 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price price-0 acctnum goods text) (nc nb nb-0 nb-1 nm data)+    (c hash hash-0 hash-1 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (5 1)) ((1 1) (5 3)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 1) (0 0)) ((5 0) (4 0)) ((5 2) (2 0)) ((5 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk hash-1)+    (privk b) (privk m))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (displaced 2 6 customer 5) nb (0 2)+    (enc "hash" c nc nb nb-0 price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))))+  (label 76)+  (parent 56)+  (seen 26)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 77)+  (parent 57)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (5 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 78)+  (parent 57)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 79)+  (parent 58)+  (seen 77 78)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 80)+  (parent 59)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (5 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 81)+  (parent 59)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 2 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 82)+  (parent 60)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 83)+  (parent 60)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 4 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 84)+  (parent 60)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 85)+  (parent 61)+  (seen 80 81)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 86)+  (parent 61)+  (seen 107 109 111)+  (unrealized (0 0) (0 2) (1 0) (6 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((2 1) (5 0)) ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 87)+  (parent 62)+  (seen 73)+  (unrealized (0 0) (0 2) (1 0) (5 0) (6 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 88)+  (parent 63)+  (unrealized (0 0) (0 2) (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 89)+  (parent 63)+  (seen 112)+  (unrealized (0 0) (0 2) (1 0) (5 0) (6 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 90)+  (parent 64)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 91)+  (parent 64)+  (seen 73 112)+  (unrealized (0 0) (0 2) (1 0) (5 0) (6 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price price-0 acctnum goods text) (nc nb nb-0 nb-1 nm data)+    (c hash hash-0 hash-1 b m name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (5 1)) ((1 1) (5 3)) ((2 1) (1 0)) ((3 1) (1 0))+    ((4 1) (0 0)) ((5 0) (4 0)) ((5 2) (2 0)) ((5 2) (3 0))+    ((5 4) (0 2)))+  (non-orig (privk c) (privk hash) (privk hash-0) (privk hash-1)+    (privk b) (privk m))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (displaced 2 6 customer 5) nb (0 2)+    (enc "hash" c nc nb nb-0 price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))))+  (label 92)+  (parent 66)+  (seen 26)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0))))+  (label 93)+  (parent 67)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (5 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 94)+  (parent 67)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (5 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 95)+  (parent 68)+  (seen 93 94)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 96)+  (parent 69)+  (seen 73 74)+  (unrealized (0 0) (0 2) (1 0) (5 0) (6 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 bank 2) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 97)+  (parent 69)+  (seen 42 53)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text) (nc nb nb-0 data)+    (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 98)+  (parent 70)+  (unrealized (0 0) (0 2) (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 99)+  (parent 70)+  (seen 73)+  (unrealized (0 0) (0 2) (1 0) (5 0) (6 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 2) (5 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 100)+  (parent 71)+  (seen 73 75 127)+  (unrealized (0 0) (0 2) (1 0) (5 0) (6 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (4 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 101)+  (parent 73)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (4 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 102)+  (parent 74)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (4 0))+    ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (4 0)+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 103)+  (parent 75)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (4 3))+    ((3 1) (1 0)) ((4 0) (5 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 104)+  (parent 78)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (5 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 105)+  (parent 81)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 106)+  (parent 82)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 107)+  (parent 82)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 108)+  (parent 83)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 109)+  (parent 83)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 110)+  (parent 84)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 111)+  (parent 84)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 3 bank 2) nb-2 (6 0)+    (enc nc nb-2 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 112)+  (parent 87)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 4 customer 3) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 113)+  (parent 87)+  (seen 118)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 114)+  (parent 88)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 115)+  (parent 88)+  (unrealized (0 0) (0 2) (1 0) (6 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 116)+  (parent 88)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 2 bank 2) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 117)+  (parent 89)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 4 customer 3) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 118)+  (parent 89)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 119)+  (parent 90)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 120)+  (parent 90)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 4 customer 3) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 121)+  (parent 91)+  (seen 73 113 118)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "6 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (4 3)) ((3 1) (1 0))+    ((4 0) (5 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 122)+  (parent 94)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 3 bank 2) nb-2 (6 0)+    (enc nc nb-2 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 123)+  (parent 96)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 124)+  (parent 98)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((0 1) (5 0)) ((1 1) (0 2)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 125)+  (parent 98)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (5 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 126)+  (parent 98)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 3 bank 2) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 127)+  (parent 99)+  (seen 123)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (1 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 4 customer 3) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 128)+  (parent 99)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 129)+  (parent 101)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 130)+  (parent 101)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 131)+  (parent 102)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 132)+  (parent 102)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (4 0))+    ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 133)+  (parent 103)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (b m c hash b-0 hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 0) (5 0))+    ((2 2) (4 0)) ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 134)+  (parent 103)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 135)+  (parent 106)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 136)+  (parent 106)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 137)+  (parent 107)+  (seen 135 136)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 138)+  (parent 108)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 139)+  (parent 108)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 140)+  (parent 109)+  (seen 138 139)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 141)+  (parent 110)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 142)+  (parent 110)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0))+    ((4 4) (1 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 143)+  (parent 111)+  (seen 141 142)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 144)+  (parent 112)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 145)+  (parent 113)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 146)+  (parent 114)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 147)+  (parent 114)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 2 bank 2) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 148)+  (parent 115)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 3 bank 2) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 149)+  (parent 115)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((5 1) (6 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 5 bank 2) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 150)+  (parent 115)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 4 customer 3) nb-0 (6 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 151)+  (parent 115)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 152)+  (parent 116)+  (seen 146 147)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm nb-1 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((0 1) (7 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 153)+  (parent 116)+  (seen 189 191 193 195)+  (unrealized (0 0) (0 2) (1 0) (7 0))+  (comment "4 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 154)+  (parent 117)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 155)+  (parent 118)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (4 3)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 156)+  (parent 119)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 157)+  (parent 119)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 158)+  (parent 120)+  (seen 156 157)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 159)+  (parent 121)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (displaced 7 6 bank 2) nb-2 (5 0)+    (enc "hash" c nc nb-1 nb-2 price (pubk hash-2))+    (enc nc nb-2 m price (pubk c))+    (enc c nc nb-2 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 160)+  (parent 121)+  (seen 73)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 161)+  (parent 123)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 162)+  (parent 124)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (5 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 163)+  (parent 124)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 2 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 164)+  (parent 125)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((4 1) (5 0))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 4 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 165)+  (parent 125)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 6 3 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 166)+  (parent 125)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (5 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 167)+  (parent 126)+  (seen 162 163)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nm nb-1 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((0 1) (6 0)) ((1 1) (0 2)) ((2 1) (4 0))+    ((3 0) (0 0)) ((3 0) (5 0)) ((3 2) (2 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand bank 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc nc nm m price-0 (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 168)+  (parent 126)+  (seen 210 212 214)+  (unrealized (0 0) (0 2) (1 0) (6 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 169)+  (parent 127)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 170)+  (parent 128)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 171)+  (parent 129)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0))+    ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 172)+  (parent 129)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 173)+  (parent 130)+  (seen 171 172)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 174)+  (parent 131)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 175)+  (parent 131)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 176)+  (parent 132)+  (seen 174 175)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 2) (4 0))+    ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 177)+  (parent 133)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (5 0)) ((2 2) (4 0))+    ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 178)+  (parent 133)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (0 0)) ((2 0) (5 0))+    ((2 2) (4 0)) ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 179)+  (parent 134)+  (seen 177 178)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (4 3)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 180)+  (parent 136)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((3 1) (5 0)) ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 181)+  (parent 139)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (4 3))+    ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 182)+  (parent 142)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 183)+  (parent 144)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 184)+  (parent 144)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 185)+  (parent 145)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 2) (6 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0))+    ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 186)+  (parent 145)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (6 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 187)+  (parent 147)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 188)+  (parent 148)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 189)+  (parent 148)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 190)+  (parent 149)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 191)+  (parent 149)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((5 1) (6 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 192)+  (parent 150)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((5 1) (6 0)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 193)+  (parent 150)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 194)+  (parent 151)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 195)+  (parent 151)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 196)+  (parent 154)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 197)+  (parent 154)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 198)+  (parent 155)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 199)+  (parent 155)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (6 0)) ((4 2) (2 0)) ((4 2) (5 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 200)+  (parent 157)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 201)+  (parent 159)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 202)+  (parent 159)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 203)+  (parent 160)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((0 1) (7 0)) ((1 1) (0 2)) ((2 1) (3 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (added-strand bank 2) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 204)+  (parent 160)+  (seen 73)+  (unrealized (0 0) (0 2) (1 0) (5 0) (7 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 data) (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 7 3 bank 2) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-0 (pubk c))))))+  (label 205)+  (parent 160)+  (seen 88 89)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 206)+  (parent 161)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 207)+  (parent 161)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (5 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 208)+  (parent 163)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 209)+  (parent 164)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (0 0)) ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 210)+  (parent 164)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((4 1) (5 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 211)+  (parent 165)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((4 1) (5 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 212)+  (parent 165)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 213)+  (parent 166)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 214)+  (parent 166)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 215)+  (parent 169)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 216)+  (parent 169)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 217)+  (parent 170)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 218)+  (parent 170)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0))+    ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 219)+  (parent 172)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 220)+  (parent 175)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (2 1)) ((1 1) (0 2)) ((2 0) (5 0)) ((2 2) (4 0))+    ((2 4) (1 0)) ((3 1) (2 3)) ((4 1) (3 0)) ((5 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 221)+  (parent 178)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 222)+  (parent 183)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 223)+  (parent 183)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 224)+  (parent 184)+  (seen 222 223)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 225)+  (parent 185)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 226)+  (parent 185)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 2) (6 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0))+    ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 227)+  (parent 186)+  (seen 225 226)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 228)+  (parent 188)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 229)+  (parent 188)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 230)+  (parent 189)+  (seen 228 229)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 231)+  (parent 190)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 232)+  (parent 190)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 233)+  (parent 191)+  (seen 231 232)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((5 1) (6 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 234)+  (parent 192)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((5 1) (6 0)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 235)+  (parent 192)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((5 1) (6 0)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 236)+  (parent 193)+  (seen 234 235)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 237)+  (parent 194)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 238)+  (parent 194)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 239)+  (parent 195)+  (seen 237 238)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 240)+  (parent 196)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 241)+  (parent 196)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 242)+  (parent 197)+  (seen 240 241)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 243)+  (parent 198)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 244)+  (parent 198)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 245)+  (parent 199)+  (seen 243 244)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 246)+  (parent 201)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 247)+  (parent 201)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 248)+  (parent 202)+  (seen 246 247)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 249)+  (parent 203)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 250)+  (parent 203)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (7 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 8 3 bank 2) nb-2 (7 0)+    (enc nc nb-2 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 251)+  (parent 204)+  (seen 144)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (displaced 8 6 bank 2) nb-1 (7 0)+    (enc nc nb-1 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 252)+  (parent 204)+  (seen 285)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "5 in cohort - 4 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (displaced 8 4 customer 3) nb-1 (7 0)+    (enc nc nb-1 m price (pubk c)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 253)+  (parent 204)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 254)+  (parent 206)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 255)+  (parent 206)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (3 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 256)+  (parent 207)+  (seen 254 255)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (0 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 257)+  (parent 209)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 258)+  (parent 209)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (0 0)) ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 259)+  (parent 210)+  (seen 257 258)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((4 1) (5 0))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 260)+  (parent 211)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((4 1) (5 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 261)+  (parent 211)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((4 1) (5 0)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 262)+  (parent 212)+  (seen 260 261)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 263)+  (parent 213)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 264)+  (parent 213)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (1 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 265)+  (parent 214)+  (seen 263 264)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 266)+  (parent 215)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0))+    ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 267)+  (parent 215)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 268)+  (parent 216)+  (seen 266 267)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 269)+  (parent 217)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 270)+  (parent 217)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (0 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0))+    ((4 1) (3 3)) ((5 1) (4 0)) ((6 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 271)+  (parent 218)+  (seen 269 270)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (6 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 272)+  (parent 223)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 273)+  (parent 226)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 274)+  (parent 229)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((3 1) (6 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 275)+  (parent 232)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0)) ((5 1) (4 3))+    ((5 1) (6 0)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 276)+  (parent 235)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (1 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 277)+  (parent 238)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (6 0))+    ((3 1) (5 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 278)+  (parent 241)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 279)+  (parent 244)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-2) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 280)+  (parent 247)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 281)+  (parent 249)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 282)+  (parent 249)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data) (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 283)+  (parent 250)+  (seen 281 282)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 284)+  (parent 252)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (displaced 8 2 bank 2) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 285)+  (parent 252)+  (seen 286 287)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (displaced 8 3 bank 2) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 286)+  (parent 252)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 8 3 bank 2) nb-2 (5 0)+    (enc "hash" c nc nb-2 nb-2 price (pubk hash-2))+    (enc "hash" c nc nb-1 nb-2 price (pubk hash-3))+    (enc nc nb-2 (pubk c)) (enc nc nb-2 m price (pubk c))+    (enc c nc nb-2 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 287)+  (parent 252)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 288)+  (parent 253)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 acctnum-1 text)+    (nc nb nb-0 nb-1 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-1) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (displaced 8 3 bank 2) nb-2 (5 0)+    (enc "hash" c nc nb-2 nb-2 price (pubk hash-2))+    (enc "hash" c nc nb-1 nb-2 price (pubk hash-3))+    (enc nc nb-2 (pubk c)) (enc nc nb-2 m price (pubk c))+    (enc c nc nb-2 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-1 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 289)+  (parent 253)+  (seen 155)+  (unrealized (0 0) (0 2) (1 0) (5 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 1) (6 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (3 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 290)+  (parent 255)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((2 1) (5 0))+    ((3 0) (6 0)) ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 291)+  (parent 258)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((4 1) (5 0))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 292)+  (parent 261)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (1 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 293)+  (parent 264)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (5 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 4) (1 0)) ((4 1) (3 3)) ((5 1) (4 0))+    ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 294)+  (parent 267)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (3 1)) ((1 1) (0 2)) ((2 1) (4 0)) ((3 0) (6 0))+    ((3 2) (2 0)) ((3 2) (5 0)) ((3 4) (1 0)) ((4 1) (3 3))+    ((5 1) (4 0)) ((6 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 295)+  (parent 270)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (7 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 296)+  (parent 282)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 297)+  (parent 284)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 298)+  (parent 284)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-1 (5 0)+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 299)+  (parent 285)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 nb-2 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-1 (5 0)+    (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-1 (pubk c)) (enc nc nb-1 m price (pubk c))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c))))))+  (label 300)+  (parent 286)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 text)+    (nc nb nb-0 nb-1 data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (acctnum-1 acctnum-0)) nb-0 (5 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b-0)) (enc nc nb-1 (pubk c))))))+  (label 301)+  (parent 287)+  (unrealized (0 0) (0 2) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 302)+  (parent 288)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 2) (7 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0))+    ((7 1) (5 0)) ((8 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 303)+  (parent 288)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 304)+  (parent 297)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)) ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 305)+  (parent 297)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 306)+  (parent 298)+  (seen 304 305)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 307)+  (parent 299)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0))+    ((4 2) (6 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0))+    ((7 1) (5 0)) ((8 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 308)+  (parent 299)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 309)+  (parent 300)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-1) (nb nb-1) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b-0) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-1 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) nb-1)))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b-0)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 310)+  (parent 300)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 311)+  (parent 301)+  (unrealized (0 0) (0 2))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum acctnum-0 goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (b m c hash b-0 hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nb-0) (nb nb-0) (b b-0) (c c) (m m)+    (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b-0) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b-0) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0)+    (privk hash-0) (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc c nc goods-0 (pubk m))+    (enc c nc nb-0 acctnum-0 price (pubk b-0)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) nb-0)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b-0)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b-0)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b-0)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 312)+  (parent 301)+  (unrealized (0 0) (0 2) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 313)+  (parent 302)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0))+    ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 314)+  (parent 302)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 2) (7 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0))+    ((7 1) (5 0)) ((8 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 315)+  (parent 303)+  (seen 313 314)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)) ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 316)+  (parent 305)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 317)+  (parent 307)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 318)+  (parent 307)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0))+    ((4 2) (6 0)) ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0))+    ((7 1) (5 0)) ((8 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 319)+  (parent 308)+  (seen 317 318)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 nb-2 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c))))))+  (label 320)+  (parent 309)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)) ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 321)+  (parent 309)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+    (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c)) (enc nc nb-2 (pubk c))+    (enc nc nb-1 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-1 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 322)+  (parent 310)+  (seen 320 321)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nc nb nb-0 nb-1 data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-3))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 323)+  (parent 311)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)) ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (added-strand merchant 2) nc (0 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 324)+  (parent 311)+  (unrealized (0 0) (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (goods price acctnum goods-0 price-0 text)+    (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods-0) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (0 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (1 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (b-0 b) (acctnum-0 acctnum)) nc+    (1 0) (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+    (enc nc nb-0 (pubk c)) (enc nc nb-1 (pubk c))+    (enc nc nb-0 m price (pubk c)) (enc nc nm m price-0 (pubk c))+    (enc c nc goods-0 (pubk m)) (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 325)+  (parent 312)+  (seen 323 324)+  (unrealized (0 0) (0 2))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 2) (7 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (5 0)) ((7 1) (5 0))+    ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 326)+  (parent 314)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((2 1) (5 0))+    ((3 1) (1 0)) ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0))+    ((4 4) (1 0)) ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0))+    ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 327)+  (parent 318)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text)+    (nc nb nb-0 nb-1 nb-2 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-1) (nb nb-1) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-1) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-1)+    (nb nb-2) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)) ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-1 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-1 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-1 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-1 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-1 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-1 m price (pubk c)))+      (send (enc c nc nb-1 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) nb-1)))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-0))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-1 price (pubk hash-2))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc nb-1 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-2 nb-1 price (pubk hash-3))+            (privk b)) (enc nc nb-2 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 328)+  (parent 321)+  (unrealized (0 2))+  (comment "empty cohort"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nc nb nb-0 nb-1 nm data)+    (m c hash b hash-0 hash-1 hash-2 hash-3 name))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-1))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb-0) (b b) (c c) (m m) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-2))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-3))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (precedes ((0 1) (4 1)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (5 0))+    ((4 0) (8 0)) ((4 2) (2 0)) ((4 2) (6 0)) ((4 4) (1 0))+    ((5 1) (4 3)) ((6 1) (7 0)) ((7 1) (5 0)) ((8 1) (0 0)))+  (non-orig (privk m) (privk c) (privk hash) (privk b) (privk hash-0)+    (privk hash-1) (privk hash-2) (privk hash-3))+  (uniq-orig nc nb nb-0 nm)+  (operation nonce-test (contracted (goods-0 goods)) nc (0 0)+    (enc nc nm m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) nb-0)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-2))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-3))+            (privk b)) (enc nc nb-1 (pubk c)))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c)))))+  (label 329)+  (parent 324)+  (unrealized (0 2))+  (comment "empty cohort"))++(comment "Nothing left to do")++(defprotocol sorted_epmo_acctnum basic+  (defrole bank+    (vars (b c m name) (acctnum price text) (hash name) (nc nm nb data))+    (trace (recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    (non-orig (privk hash))+    (annotations b+      (1+        (forall ((pm name))+          (implies+            (and (authtransfer c acctnum b price pm nm)+              (reqtransfer pm b price pm nm))+            (dotransfer acctnum b price pm nm))))+      (2+        (and (says c (authtransfer c acctnum b price m nm))+          (says m (reqtransfer m b price m nm))))))+  (defrole customer+    (vars (b c m hash name) (acctnum goods price text) (nc nm nb data))+    (trace (send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    (non-orig (privk b) (privk hash))+    (uniq-orig nc)+    (annotations c+      (1+        (says m+          (implies+            (exists ((acctnum2 text))+              (dotransfer acctnum2 b price m nm)) (doship m goods c))))+      (3+        (says b+          (forall ((pm name))+            (implies+              (and (authtransfer c acctnum b price m nm)+                (reqtransfer pm b price pm nm))+              (dotransfer acctnum b price pm nm)))))+      (4 (authtransfer c acctnum b price m nm))))+  (defrole merchant+    (vars (b c m hash name) (goods price text) (nc nm nb data))+    (trace (recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    (non-orig (privk hash))+    (uniq-orig nm)+    (annotations m+      (1+        (implies+          (exists ((acctnum2 text)) (dotransfer acctnum2 b price m nm))+          (doship m goods c)))+      (2+        (and+          (says b+            (forall ((pm name))+              (exists ((acctnum2 text))+                (implies+                  (and (authtransfer c acctnum2 b price m nm)+                    (reqtransfer pm b price pm nm))+                  (dotransfer acctnum2 b price pm nm)))))+          (says c+            (exists ((acctnum2 text))+              (authtransfer c acctnum2 b price m nm)))))+      (3 (and (reqtransfer m b price m nm) (doship m goods c))))))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price text) (nm nb nc data) (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))+  (label 330)+  (unrealized (0 2))+  (origs (nb (0 1)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price goods price-0 text) (nm nb nc nc-0 data)+    (b m c hash c-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price-0) (nc nc-0) (nm nm)+    (nb nb) (b b) (c c-0) (m m) (hash hash))+  (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (operation encryption-test (added-strand merchant 4)+    (enc (enc "hash" b m nb nm (pubk hash)) (privk m)) (0 2))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c-0 nc-0 goods (pubk m)))+      (send (enc nc-0 nm m price-0 (pubk c-0)))+      (recv+        (cat+          (enc (enc "hash" c-0 nc-0 nb nm price-0 (pubk hash))+            (privk b)) nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))+  (label 331)+  (parent 330)+  (unrealized (1 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price goods text) (nm nb nc data) (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (1 2)) ((1 1) (0 0)) ((1 3) (0 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (operation encryption-test (displaced 2 0 bank 2)+    (enc (enc "hash" c-0 nc-0 nb nm price-0 (pubk hash)) (privk b))+    (1 2))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m)))))+  (label 332)+  (parent 331)+  (unrealized (0 0) (1 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price goods acctnum-0 goods-0 text) (nm nb nc data)+    (b m c hash b-0 m-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (nb nb) (b b-0) (c c) (m m-0)+    (hash hash))+  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))+    ((2 0) (1 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0))+  (uniq-orig nm nb nc)+  (operation nonce-test (added-strand customer 5) nb (1 2)+    (enc "hash" c nc nb nm price (pubk hash)) (enc nc nb (pubk c)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods-0 (pubk m-0)))+      (recv (enc nc nm m-0 price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b-0)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))+          nb))))+  (label 333)+  (parent 332)+  (unrealized (0 0) (2 1) (2 3))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price goods acctnum-0 goods-0 text) (nm nb nc data)+    (b m c hash b-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (nb nb) (b b-0) (c c) (m m)+    (hash hash))+  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))+    ((2 0) (1 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk b-0))+  (uniq-orig nm nb nc)+  (operation nonce-test (contracted (m-0 m)) nm (2 1)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b-0)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0))+          nb))))+  (label 334)+  (parent 333)+  (unrealized (0 0) (1 0) (2 3))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price goods acctnum-0 goods-0 text) (nm nb nc data)+    (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))+    ((2 0) (1 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (operation encryption-test (displaced 3 0 bank 2)+    (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b-0)) (2 3))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 335)+  (parent 334)+  (unrealized (0 0) (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nm nb nc data)+    (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))+    ((2 0) (1 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (operation nonce-test (contracted (goods-0 goods)) nc (1 0)+    (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 336)+  (parent 335)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price goods acctnum-0 goods-0 price-0 text)+    (nm nb nc nm-0 data) (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods-0)+    (price price) (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods-0) (price price-0) (nc nc)+    (nm nm-0) (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))+    ((2 0) (3 0)) ((2 4) (1 2)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (added-strand merchant 2) nc (1 0)+    (enc c nc goods-0 (pubk m)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods-0 (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods-0 (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 337)+  (parent 335)+  (unrealized (0 0) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nm nb nc data)+    (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (0 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (operation nonce-test (displaced 3 2 customer 3) nm (0 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 338)+  (parent 336)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nm nb nc nm-0 data) (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (0 0)) ((1 1) (2 1)) ((1 3) (0 2))+    ((2 0) (3 0)) ((2 4) (1 2)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (contracted (goods-0 goods)) nc (1 0)+    (enc nc nm-0 m price-0 (pubk c)) (enc c nc goods (pubk m)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 339)+  (parent 337)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nm nb nc data) (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (0 0)) ((2 4) (1 2)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))))+  (label 340)+  (parent 338)+  (unrealized)+  (shape)+  (maps+    ((0)+      ((b b) (m m) (c c) (nm nm) (nb nb) (nc nc) (hash hash)+        (acctnum acctnum) (price price))))+  (origs (nc (2 0)) (nm (1 1)) (nb (0 1))))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nm nb nc nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 1) (3 0)) ((1 3) (0 2))+    ((2 0) (1 0)) ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nm nb nc)+  (operation nonce-test (added-strand bank 2) nm (0 0)+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum-0 price (pubk b)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nm acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 341)+  (parent 338)+  (unrealized (0 0) (3 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nm nb nc nm-0 data) (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (displaced 4 2 customer 3) nm (0 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 342)+  (parent 339)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nm nb nc nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nm nb nc)+  (operation nonce-test (displaced 4 2 customer 3) nm (3 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nm acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 343)+  (parent 341)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nm nb nc nm-0 data)+    (b m c hash name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c)))))+  (label 344)+  (parent 342)+  (seen 340)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nm nb nc nm-0 nb-0 data) (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 1) (4 0)) ((1 3) (0 2))+    ((2 0) (3 0)) ((2 2) (0 0)) ((2 4) (1 2)) ((3 1) (1 0))+    ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (added-strand bank 2) nm (0 0)+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum-0 price (pubk b)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c))))+    ((recv (enc c nc nm acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 345)+  (parent 342)+  (unrealized (0 0) (4 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nm nb nc nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nm nb nc)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)+    (enc "hash" c nc nb-0 nm price (pubk hash-0))+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 346)+  (parent 343)+  (seen 340)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nb nc nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (displaced 4 3 bank 2) nm (0 0)+    (enc "hash" c nc nb-0 nm price (pubk hash-0))+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum-0 price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 347)+  (parent 343)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nm nb nc nm-0 nb-0 data) (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (displaced 5 2 customer 3) nm (4 0)+    (enc nc nm m price (pubk c)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c))))+    ((recv (enc c nc nm acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 348)+  (parent 345)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nb nc nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 349)+  (parent 347)+  (seen 340)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nb nc nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 1) (4 0)) ((1 3) (0 2))+    ((2 0) (1 0)) ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (0 0))+    ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 350)+  (parent 347)+  (unrealized (0 0) (4 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nm nb nc nm-0 nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nm)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nm) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm-0)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nm)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nm nb nc nm-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nm (0 0)+    (enc "hash" c nc nb-0 nm price (pubk hash-0))+    (enc nc nm m price (pubk c)) (enc c nc nm acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nm (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nm m price (pubk c)))+      (send (enc c nc nm acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nm price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm-0 m price-0 (pubk c))))+    ((recv (enc c nc nm acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nm price (pubk hash-0)) (privk b))+          (enc nc nb-0 (pubk c))))))+  (label 351)+  (parent 348)+  (seen 346)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nb nc nm nb-0 data) (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (displaced 5 4 bank 2) nm-0 (0 0)+    (enc "hash" c nc nb-0 nm-0 price (pubk hash-0))+    (enc nc nm-0 m price (pubk c))+    (enc c nc nm-0 acctnum-0 price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 352)+  (parent 348)+  (unrealized (0 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nb nc nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (4 0)) ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (displaced 5 3 bank 2) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 353)+  (parent 350)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods text) (nb nc nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (0 0))+    ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (displaced 5 2 customer 3) nb-0 (4 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 354)+  (parent 350)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nb nc nm nb-0 data)+    (b m c hash hash-0 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c))))))+  (label 355)+  (parent 352)+  (seen 349)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nb nc nm nb-0 nb-1 data) (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 1) (5 0)) ((1 3) (0 2))+    ((2 0) (3 0)) ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0))+    ((4 1) (0 0)) ((5 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (added-strand bank 2) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum-0 price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 356)+  (parent 352)+  (unrealized (0 0) (5 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nb nc nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 4) (1 2)) ((3 1) (4 0)) ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 357)+  (parent 353)+  (seen 346)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods text) (nb nc nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (1 0))+    ((2 2) (3 0)) ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (0 0))+    ((4 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nb-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 358)+  (parent 354)+  (seen 346)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nb nc nm nb-0 nb-1 data) (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (5 0))+    ((5 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (displaced 6 4 bank 2) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 359)+  (parent 356)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (acctnum price acctnum-0 goods price-0 text)+    (nb nc nm nb-0 nb-1 data) (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum-0) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum-0) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 2) (5 0)) ((2 4) (1 2)) ((3 1) (1 0))+    ((4 1) (0 0)) ((5 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (displaced 6 2 customer 3) nb-0 (5 0)+    (enc nc nb-0 m price (pubk c)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum-0 price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum-0 price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 360)+  (parent 356)+  (unrealized (0 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nb nc nm nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 4) (1 2)) ((3 1) (1 0)) ((4 1) (5 0))+    ((5 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 361)+  (parent 359)+  (seen 357)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton sorted_epmo_acctnum+  (vars (price acctnum goods price-0 text) (nb nc nm nb-0 nb-1 data)+    (b m c hash hash-0 hash-1 name))+  (defstrand bank 3 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 4 (goods goods) (price price) (nc nc) (nm nb-0)+    (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand customer 5 (acctnum acctnum) (goods goods) (price price)+    (nc nc) (nm nb-0) (nb nb) (b b) (c c) (m m) (hash hash))+  (defstrand merchant 2 (goods goods) (price price-0) (nc nc) (nm nm)+    (c c) (m m))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-0) (b b) (c c) (hash hash-0))+  (defstrand bank 2 (acctnum acctnum) (price price) (nc nc) (nm nb-0)+    (nb nb-1) (b b) (c c) (hash hash-1))+  (precedes ((0 1) (2 3)) ((1 1) (2 1)) ((1 3) (0 2)) ((2 0) (3 0))+    ((2 2) (4 0)) ((2 2) (5 0)) ((2 4) (1 2)) ((3 1) (1 0))+    ((4 1) (0 0)) ((5 1) (0 0)))+  (non-orig (privk b) (privk m) (privk c) (privk hash) (privk hash-0)+    (privk hash-1))+  (uniq-orig nb nc nm nb-0)+  (operation nonce-test (contracted (acctnum-0 acctnum)) nb-0 (0 0)+    (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+    (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+    (enc nc nb-0 (pubk c)) (enc nc nb-0 m price (pubk c))+    (enc c nc nb-0 acctnum price (pubk b)))+  (traces+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (recv (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nb-0 m price (pubk c)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb))+      (send (enc (enc "hash" b m nb nb-0 (pubk hash)) (privk m))))+    ((send (enc c nc goods (pubk m)))+      (recv (enc nc nb-0 m price (pubk c)))+      (send (enc c nc nb-0 acctnum price (pubk b)))+      (recv+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          (enc nc nb (pubk c))))+      (send+        (cat (enc (enc "hash" c nc nb nb-0 price (pubk hash)) (privk b))+          nb)))+    ((recv (enc c nc goods (pubk m)))+      (send (enc nc nm m price-0 (pubk c))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-0 nb-0 price (pubk hash-0))+            (privk b)) (enc nc nb-0 (pubk c)))))+    ((recv (enc c nc nb-0 acctnum price (pubk b)))+      (send+        (cat+          (enc (enc "hash" c nc nb-1 nb-0 price (pubk hash-1))+            (privk b)) (enc nc nb-1 (pubk c))))))+  (label 362)+  (parent 360)+  (seen 358)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/targetterms2.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol targetterms2 basic
tst/targetterms6.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol targetterms6 basic@@ -119,16 +119,15 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton targetterms6-  (vars (m mesg) (n text) (a name))+  (vars (n text) (a name))   (defstrand init 2 (n n) (a a))   (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a))   (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a))-  (defstrand trans 3 (m m) (n n) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 2) (0 1))-    ((2 2) (0 1)) ((3 2) (2 1)))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (2 1)) ((2 2) (0 1)))   (non-orig (privk a))   (uniq-orig n)-  (operation nonce-test (added-strand trans 3) n (2 1) (enc n (pubk a)))+  (operation nonce-test (displaced 3 1 trans 3) n (2 1)+    (enc n (pubk a)))   (traces     ((send (enc n (pubk a)))       (recv@@ -137,24 +136,25 @@     ((recv (enc n (pubk a))) (recv (enc n (pubk a)))       (send (enc n (enc n (pubk a)) (pubk a))))     ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a)))-      (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))-    ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a)))))+      (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))))   (label 5)   (parent 4)-  (seen 6)-  (unrealized (2 1))-  (comment "2 in cohort - 1 not yet seen"))+  (unrealized)+  (shape)+  (maps ((0) ((a a) (n n))))+  (origs (n (0 0))))  (defskeleton targetterms6-  (vars (n text) (a name))+  (vars (m mesg) (n text) (a name))   (defstrand init 2 (n n) (a a))   (defstrand trans 3 (m (enc n (pubk a))) (n n) (a a))   (defstrand trans 3 (m (enc n (enc n (pubk a)) (pubk a))) (n n) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 2) (2 1)) ((2 2) (0 1)))+  (defstrand trans 3 (m m) (n n) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 2) (0 1))+    ((2 2) (0 1)) ((3 2) (2 1)))   (non-orig (privk a))   (uniq-orig n)-  (operation nonce-test (displaced 3 1 trans 3) n (2 1)-    (enc n (pubk a)))+  (operation nonce-test (added-strand trans 3) n (2 1) (enc n (pubk a)))   (traces     ((send (enc n (pubk a)))       (recv@@ -163,13 +163,13 @@     ((recv (enc n (pubk a))) (recv (enc n (pubk a)))       (send (enc n (enc n (pubk a)) (pubk a))))     ((recv (enc n (pubk a))) (recv (enc n (enc n (pubk a)) (pubk a)))-      (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a)))))+      (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))+    ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a)))))   (label 6)   (parent 4)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (n n))))-  (origs (n (0 0))))+  (seen 5)+  (unrealized (2 1))+  (comment "2 in cohort - 1 not yet seen"))  (defskeleton targetterms6   (vars (m mesg) (n text) (a name))@@ -194,8 +194,8 @@       (send (enc n (enc n (enc n (pubk a)) (pubk a)) (pubk a))))     ((recv (enc n (pubk a))) (recv m) (send (enc n m (pubk a)))))   (label 7)-  (parent 5)-  (seen 6)+  (parent 6)+  (seen 5)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/targetterms8.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol targetterms8 basic@@ -18,18 +18,17 @@   (uniq-orig n1)   (traces ((send (enc n1 (enc a n2 k) k)) (recv (enc a n1 k))))   (label 0)-  (seen 1)   (unrealized (0 1))   (origs (n1 (0 0)))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton targetterms8   (vars (n2 text) (a name) (k akey))   (defstrand init 2 (n1 n2) (n2 n2) (a a) (k k))   (non-orig (invk k))   (uniq-orig n2)-  (operation nonce-test (added-strand init 1) n2 (0 1)-    (enc n2 (enc a n2 k) k))+  (operation nonce-test (displaced 1 0 init 1) n1 (0 1)+    (enc n1 (enc a n2 k) k))   (traces ((send (enc n2 (enc a n2 k) k)) (recv (enc a n2 k))))   (label 1)   (parent 0)
tst/timestamping.tst view
@@ -1,6 +1,6 @@ (herald timestamping-service) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol timestamping-service basic@@ -407,18 +407,18 @@     (trent alice alice_1 alice-0 name))   (defstrand client 2 (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1)) (h h)     (h_1 h_1) (n n) (alice alice) (alice_1 alice_1) (trent trent))+  (defstrand origin 2 (h h) (h_1 h_1) (t_1 t_1) (l_1 l_1) (n n)+    (alice alice) (alice_1 alice_1) (trent trent))   (defstrand big-bang 1 (n n) (trent trent))   (defstrand server 2     (t_1       (enc n alice h alice_1 h_1 t_1 (hash alice_1 h_1 t_1 l_1)         (privk trent))) (l_1 (hash alice_1 h_1 t_1 l_1)) (h h-0) (h_1 h)     (n n-0) (alice alice-0) (alice_1 alice) (trent trent))-  (defstrand origin 2 (h h) (h_1 h_1) (t_1 t_1) (l_1 l_1) (n n)-    (alice alice) (alice_1 alice_1) (trent trent))-  (precedes ((1 0) (3 0)) ((2 1) (0 1)) ((3 1) (2 0)))+  (precedes ((1 1) (3 0)) ((2 0) (1 0)) ((3 1) (0 1)))   (non-orig (privk trent))   (uniq-orig n n-0)-  (operation encryption-test (added-strand origin 2)+  (operation encryption-test (displaced 4 1 origin 2)     (enc alice h       (enc n alice h alice_1 h_1 t_1 (hash alice_1 h_1 t_1 l_1)         (privk trent)) (hash alice_1 h_1 t_1 l_1) (privk trent)) (3 0))@@ -427,6 +427,13 @@       (recv         (enc n alice h alice_1 h_1 t_1 (hash alice_1 h_1 t_1 l_1)           (privk trent))))+    ((recv (enc (enc n (privk trent)) (pubk trent)))+      (send+        (enc+          (enc alice h+            (enc n alice h alice_1 h_1 t_1 (hash alice_1 h_1 t_1 l_1)+              (privk trent)) (hash alice_1 h_1 t_1 l_1) (privk trent))+          (pubk trent))))     ((send (enc (enc n (privk trent)) (pubk trent))))     ((recv        (cat@@ -458,14 +465,7 @@                   (enc n alice h alice_1 h_1 t_1                     (hash alice_1 h_1 t_1 l_1) (privk trent))                   (hash alice_1 h_1 t_1 l_1))) (privk trent))-            (pubk trent)))))-    ((recv (enc (enc n (privk trent)) (pubk trent)))-      (send-        (enc-          (enc alice h-            (enc n alice h alice_1 h_1 t_1 (hash alice_1 h_1 t_1 l_1)-              (privk trent)) (hash alice_1 h_1 t_1 l_1) (privk trent))-          (pubk trent)))))+            (pubk trent))))))   (label 7)   (parent 6)   (unrealized)@@ -474,6 +474,6 @@     ((0)       ((trent trent) (alice alice) (alice_1 alice_1) (n n) (h h)         (h_1 h_1) (t_1 t_1) (l (hash alice_1 h_1 t_1 l_1)))))-  (origs (n-0 (2 1)) (n (1 0))))+  (origs (n-0 (3 1)) (n (2 0))))  (comment "Nothing left to do")
tst/tor.tst view
@@ -1,7 +1,7 @@ (herald "Tor Circuit-Level Handshake Protocol" (algebra diffie-hellman)   (comment "Achieves unilateral authentication")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol tor diffie-hellman
tst/uncarried_keys.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol uncarried-keys basic@@ -49,39 +49,37 @@ (defskeleton uncarried-keys   (vars (a text) (A B name) (K akey))   (defstrand init 4 (a a) (A A) (B B) (K K))-  (defstrand resp 2 (a a) (A A) (B B))   (defstrand resp 4 (a a) (A A) (B B) (K K))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 2) (2 2)) ((1 1) (0 1))-    ((2 3) (0 3)))+  (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1)) ((1 3) (0 3)))   (non-orig (invk K) (privk B))   (uniq-orig a K)-  (operation encryption-test (added-strand resp 4) (enc a A B K) (0 3))+  (operation encryption-test (displaced 1 2 resp 4) (enc a A B K) (0 3))   (traces     ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A)))       (send (enc a K (pubk B))) (recv (enc a A B K)))-    ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))))     ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A)))       (recv (enc a K (pubk B))) (send (enc a A B K))))   (label 2)   (parent 1)-  (seen 3)   (unrealized)   (shape)   (maps ((0) ((a a) (A A) (B B) (K K))))-  (origs (K (0 2)) (a (0 0)))-  (comment "1 in cohort - 0 not yet seen"))+  (origs (K (0 2)) (a (0 0))))  (defskeleton uncarried-keys   (vars (a text) (A B name) (K akey))   (defstrand init 4 (a a) (A A) (B B) (K K))+  (defstrand resp 2 (a a) (A A) (B B))   (defstrand resp 4 (a a) (A A) (B B) (K K))-  (precedes ((0 0) (1 0)) ((0 2) (1 2)) ((1 1) (0 1)) ((1 3) (0 3)))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 2) (2 2)) ((1 1) (0 1))+    ((2 3) (0 3)))   (non-orig (invk K) (privk B))   (uniq-orig a K)-  (operation encryption-test (displaced 1 2 resp 4) (enc a A B K) (0 3))+  (operation encryption-test (added-strand resp 4) (enc a A B K) (0 3))   (traces     ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A)))       (send (enc a K (pubk B))) (recv (enc a A B K)))+    ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))))     ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A)))       (recv (enc a K (pubk B))) (send (enc a A B K))))   (label 3)@@ -95,42 +93,42 @@   (vars (a text) (A B name))   (defstrand init 4 (a a) (A A) (B B) (K (pubk A)))   (defstrand resp 2 (a a) (A A) (B B))-  (defstrand resp 2 (a a) (A A) (B B))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))   (non-orig (privk A) (privk B))   (uniq-orig a (pubk A))-  (operation encryption-test (added-strand resp 2) (enc a A B (pubk A))+  (operation encryption-test (displaced 2 1 resp 2) (enc a A B (pubk A))     (0 3))   (traces     ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A)))       (send (enc a (pubk A) (pubk B))) (recv (enc a A B (pubk A))))-    ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))))     ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A)))))   (label 4)   (parent 1)-  (seen 5)   (unrealized)-  (comment "1 in cohort - 0 not yet seen"))+  (shape)+  (maps ((0) ((a a) (A A) (B B) (K (pubk A)))))+  (origs ((pubk A) (0 2)) (a (0 0))))  (defskeleton uncarried-keys   (vars (a text) (A B name))   (defstrand init 4 (a a) (A A) (B B) (K (pubk A)))   (defstrand resp 2 (a a) (A A) (B B))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (defstrand resp 2 (a a) (A A) (B B))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 3)))   (non-orig (privk A) (privk B))   (uniq-orig a (pubk A))-  (operation encryption-test (displaced 2 1 resp 2) (enc a A B (pubk A))+  (operation encryption-test (added-strand resp 2) (enc a A B (pubk A))     (0 3))   (traces     ((send (enc "start" a A B (pubk B))) (recv (enc a A B (pubk A)))       (send (enc a (pubk A) (pubk B))) (recv (enc a A B (pubk A))))+    ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A))))     ((recv (enc "start" a A B (pubk B))) (send (enc a A B (pubk A)))))   (label 5)   (parent 1)+  (seen 4)   (unrealized)-  (shape)-  (maps ((0) ((a a) (A A) (B B) (K (pubk A)))))-  (origs ((pubk A) (0 2)) (a (0 0))))+  (comment "1 in cohort - 0 not yet seen"))  (defskeleton uncarried-keys   (vars (a text) (A B name) (K akey))
tst/uo.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol uniq-orig basic
tst/wang-hash.tst view
@@ -1,6 +1,6 @@ (herald "Wang's Fair Exchange Protocol" (bound 10)) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read") (comment "Strand count bounded at 10") @@ -340,9 +340,8 @@     ((recv k) (send k)))   (label 2)   (parent 1)-  (seen 3)   (unrealized (2 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton wang   (vars (r text) (m data) (b t a name) (k skey))@@ -352,7 +351,7 @@   (precedes ((1 1) (0 0)) ((2 2) (1 0)))   (non-orig (privk "encr" t))   (uniq-orig m k)-  (operation nonce-test (added-strand init1 3) k (2 0)+  (operation nonce-test (displaced 0 3 init1 3) k (2 0)     (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r       (pubk "encr" t)))   (traces ((recv m) (send m)) ((recv k) (send k))@@ -817,10 +816,9 @@              (pubk "encr" t)) (privk "sign" a))))) ((recv k) (send k)))   (label 8)   (parent 7)-  (seen 9)   (unrealized (1 0))   (origs (m (0 0)) (k (0 0)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton wang   (vars (r text) (m data) (b t a name) (k skey))@@ -829,7 +827,7 @@   (precedes ((1 2) (0 0)))   (non-orig (privk "encr" t))   (uniq-orig m k)-  (operation nonce-test (added-strand init1 3) k (1 0)+  (operation nonce-test (displaced 0 2 init1 3) k (1 0)     (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r       (pubk "encr" t)))   (traces ((recv k) (send k))@@ -3162,16 +3160,15 @@   (comment "8 in cohort - 4 not yet seen"))  (defskeleton wang-  (vars (r r-0 text) (m data) (a t b name) (k skey))+  (vars (r text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r         (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 1) (0 3)))+  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 1) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (added-strand init2 2)+  (operation encryption-test (displaced 1 2 init2 2)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3))   (traces     ((recv@@ -3214,19 +3211,11 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-             (pubk "encr" t)) (privk "sign" a)))))-    ((send-       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)-         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0-           (pubk "encr" t))-         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))-           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))   (label 26)   (parent 25)-  (seen 27)   (unrealized)   (shape)   (maps@@ -3235,19 +3224,19 @@         (e2           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r             (pubk "encr" t))) (x (hash k)))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a t b name) (k skey))+  (vars (r r-0 text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r         (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t))-  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (0 3)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 1) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (displaced 1 2 init2 2)+  (operation encryption-test (added-strand init2 2)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3))   (traces     ((recv@@ -3290,6 +3279,13 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+             (pubk "encr" t)) (privk "sign" a)))))+    ((send+       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)+         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+           (pubk "encr" t))+         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))+           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))@@ -3306,16 +3302,15 @@   (origs))  (defskeleton wang-  (vars (r r-0 text) (m data) (a t b name) (k skey))+  (vars (r text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r         (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 2) (0 3)))+  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 2) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (added-strand init4 3)+  (operation encryption-test (displaced 1 2 init4 3)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3))   (traces     ((recv@@ -3358,23 +3353,15 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-             (pubk "encr" t)) (privk "sign" a)))))-    ((send-       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)-         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0-           (pubk "encr" t))-         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))-           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (recv         (enc "eortag" (hash a b t (hash (enc m k)) (hash k))-          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r             (pubk "encr" t)) (privk "sign" b)))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))   (label 28)   (parent 25)-  (seen 29)   (unrealized)   (shape)   (maps@@ -3383,19 +3370,19 @@         (e2           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r             (pubk "encr" t))) (x (hash k)))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a t b name) (k skey))+  (vars (r r-0 text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r         (pubk "encr" t))) (x (hash k)) (a a) (b b) (t t))-  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 2) (0 3)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 2) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (displaced 1 2 init4 3)+  (operation encryption-test (added-strand init4 3)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 3))   (traces     ((recv@@ -3438,10 +3425,17 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+             (pubk "encr" t)) (privk "sign" a)))))+    ((send+       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)+         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+           (pubk "encr" t))+         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))+           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (recv         (enc "eortag" (hash a b t (hash (enc m k)) (hash k))-          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0             (pubk "encr" t)) (privk "sign" b)))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))@@ -4593,14 +4587,13 @@   (comment "8 in cohort - 4 not yet seen"))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 1) (0 1)))+  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init2 2)+  (operation encryption-test (displaced 1 2 init2 2)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -4630,33 +4623,25 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-             (pubk "encr" t)) (privk "sign" a)))))-    ((send-       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)-         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0-           (pubk "encr" t))-         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))-           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))   (label 39)   (parent 38)-  (seen 40)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y (hash (enc m k))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init2 2)+  (operation encryption-test (added-strand init2 2)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -4686,6 +4671,13 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+             (pubk "encr" t)) (privk "sign" a)))))+    ((send+       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)+         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+           (pubk "encr" t))+         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))+           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))@@ -4697,14 +4689,13 @@   (origs))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 2) (0 1)))+  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init4 3)+  (operation encryption-test (displaced 1 2 init4 3)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -4734,37 +4725,29 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-             (pubk "encr" t)) (privk "sign" a)))))-    ((send-       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)-         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0-           (pubk "encr" t))-         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))-           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (recv         (enc "eortag" (hash a b t (hash (enc m k)) (hash k))-          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r             (pubk "encr" t)) (privk "sign" b)))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))   (label 41)   (parent 38)-  (seen 42)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y (hash (enc m k))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 2) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init4 3)+  (operation encryption-test (added-strand init4 3)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -4794,10 +4777,17 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+             (pubk "encr" t)) (privk "sign" a)))))+    ((send+       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)+         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+           (pubk "encr" t))+         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))+           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (recv         (enc "eortag" (hash a b t (hash (enc m k)) (hash k))-          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0             (pubk "encr" t)) (privk "sign" b)))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))@@ -5162,14 +5152,13 @@   (comment "8 in cohort - 4 not yet seen"))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 1) (0 1)))+  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init2 2)+  (operation encryption-test (displaced 1 2 init2 2)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -5199,33 +5188,25 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-             (pubk "encr" t)) (privk "sign" a)))))-    ((send-       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)-         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0-           (pubk "encr" t))-         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))-           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))   (label 45)   (parent 44)-  (seen 46)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y (hash (enc m k))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init2 2)+  (operation encryption-test (added-strand init2 2)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -5255,6 +5236,13 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+             (pubk "encr" t)) (privk "sign" a)))))+    ((send+       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)+         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+           (pubk "encr" t))+         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))+           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))@@ -5266,14 +5254,13 @@   (origs))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 2) (0 1)))+  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init4 3)+  (operation encryption-test (displaced 1 2 init4 3)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -5303,37 +5290,29 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-             (pubk "encr" t)) (privk "sign" a)))))-    ((send-       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)-         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0-           (pubk "encr" t))-         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))-           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (recv         (enc "eortag" (hash a b t (hash (enc m k)) (hash k))-          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r             (pubk "encr" t)) (privk "sign" b)))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))   (label 47)   (parent 44)-  (seen 48)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (t t) (r r) (k k) (y (hash (enc m k))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (hash (enc m k))) (r r) (a a) (b b) (t t)     (k k))-  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 2) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init4 3)+  (operation encryption-test (added-strand init4 3)     (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)) (0 1))   (traces     ((recv@@ -5363,10 +5342,17 @@            (pubk "encr" t))          (enc "eootag" (hash a b t (hash (enc m k)) (hash k))            (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+             (pubk "encr" t)) (privk "sign" a)))))+    ((send+       (cat (cat a b t (hash (enc m k)) (hash k)) (enc m k)+         (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0+           (pubk "encr" t))+         (enc "eootag" (hash a b t (hash (enc m k)) (hash k))+           (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0              (pubk "encr" t)) (privk "sign" a))))       (recv         (enc "eortag" (hash a b t (hash (enc m k)) (hash k))-          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r+          (enc "keytag" (hash a b t (hash (enc m k)) (hash k)) k r-0             (pubk "encr" t)) (privk "sign" b)))       (send         (enc "abrq" a b t (hash (enc m k)) (hash k) (privk "sign" a)))))
tst/wang-key-hash.tst view
@@ -1,6 +1,6 @@ (herald "Wang's Fair Exchange Protocol" (bound 10)) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read") (comment "Strand count bounded at 10") @@ -582,9 +582,8 @@            (privk "sign" a))))) ((recv m) (send m)) ((recv k) (send k)))   (label 2)   (parent 1)-  (seen 3)   (unrealized (2 0))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton wang   (vars (r text) (m data) (b t a name) (k skey))@@ -594,7 +593,7 @@   (precedes ((1 1) (0 0)) ((2 2) (1 0)))   (non-orig (privk "encr" t))   (uniq-orig m k)-  (operation nonce-test (added-strand init1 3) k (2 0)+  (operation nonce-test (displaced 0 3 init1 3) k (2 0)     (enc "keytag"       (enc "h"         (cat "h" a b t (enc "h" (cat "h" (enc m k)))@@ -1429,10 +1428,9 @@            (privk "sign" a))))) ((recv k) (send k)))   (label 8)   (parent 7)-  (seen 9)   (unrealized (1 0))   (origs (m (0 0)) (k (0 0)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton wang   (vars (r text) (m data) (b t a name) (k skey))@@ -1441,7 +1439,7 @@   (precedes ((1 2) (0 0)))   (non-orig (privk "encr" t))   (uniq-orig m k)-  (operation nonce-test (added-strand init1 3) k (1 0)+  (operation nonce-test (displaced 0 2 init1 3) k (1 0)     (enc "keytag"       (enc "h"         (cat "h" a b t (enc "h" (cat "h" (enc m k)))@@ -5689,7 +5687,7 @@   (comment "8 in cohort - 4 not yet seen"))  (defskeleton wang-  (vars (r r-0 text) (m data) (a t b name) (k skey))+  (vars (r text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag"@@ -5697,11 +5695,10 @@           (cat "h" a b t (enc "h" (cat "h" (enc m k)))             (enc "h" (cat "h" k)))) k r (pubk "encr" t)))     (x (enc "h" (cat "h" k))) (a a) (b b) (t t))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 1) (0 3)))+  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 1) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (added-strand init2 2)+  (operation encryption-test (displaced 1 2 init2 2)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))   (traces@@ -5802,30 +5799,12 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))-           (privk "sign" a)))))-    ((send-       (cat-         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))-         (enc m k)-         (enc "keytag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))-         (enc "eootag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k))))-           (enc "keytag"-             (enc "h"-               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))           (enc "h" (cat "h" k)) (privk "sign" a)))))   (label 26)   (parent 25)-  (seen 27)   (unrealized)   (shape)   (maps@@ -5837,11 +5816,10 @@               (cat "h" a b t (enc "h" (cat "h" (enc m k)))                 (enc "h" (cat "h" k)))) k r (pubk "encr" t)))         (x (enc "h" (cat "h" k))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a t b name) (k skey))+  (vars (r r-0 text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag"@@ -5849,10 +5827,11 @@           (cat "h" a b t (enc "h" (cat "h" (enc m k)))             (enc "h" (cat "h" k)))) k r (pubk "encr" t)))     (x (enc "h" (cat "h" k))) (a a) (b b) (t t))-  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (0 3)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 1) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (displaced 1 2 init2 2)+  (operation encryption-test (added-strand init2 2)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))   (traces@@ -5953,6 +5932,23 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))+           (privk "sign" a)))))+    ((send+       (cat+         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))+         (enc m k)+         (enc "keytag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+         (enc "eootag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k))))+           (enc "keytag"+             (enc "h"+               (cat "h" a b t (enc "h" (cat "h" (enc m k)))+                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))@@ -5973,7 +5969,7 @@   (origs))  (defskeleton wang-  (vars (r r-0 text) (m data) (a t b name) (k skey))+  (vars (r text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag"@@ -5981,11 +5977,10 @@           (cat "h" a b t (enc "h" (cat "h" (enc m k)))             (enc "h" (cat "h" k)))) k r (pubk "encr" t)))     (x (enc "h" (cat "h" k))) (a a) (b b) (t t))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 2) (0 3)))+  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 2) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (added-strand init4 3)+  (operation encryption-test (displaced 1 2 init4 3)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))   (traces@@ -6086,23 +6081,6 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))-           (privk "sign" a)))))-    ((send-       (cat-         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))-         (enc m k)-         (enc "keytag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))-         (enc "eootag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k))))-           (enc "keytag"-             (enc "h"-               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (recv         (enc "eortag"@@ -6112,14 +6090,13 @@           (enc "keytag"             (enc "h"               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+                (enc "h" (cat "h" k)))) k r (pubk "encr" t))           (privk "sign" b)))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))           (enc "h" (cat "h" k)) (privk "sign" a)))))   (label 28)   (parent 25)-  (seen 29)   (unrealized)   (shape)   (maps@@ -6131,11 +6108,10 @@               (cat "h" a b t (enc "h" (cat "h" (enc m k)))                 (enc "h" (cat "h" k)))) k r (pubk "encr" t)))         (x (enc "h" (cat "h" k))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a t b name) (k skey))+  (vars (r r-0 text) (m data) (a t b name) (k skey))   (defstrand resp3 4 (e1 (enc m k))     (e2       (enc "keytag"@@ -6143,10 +6119,11 @@           (cat "h" a b t (enc "h" (cat "h" (enc m k)))             (enc "h" (cat "h" k)))) k r (pubk "encr" t)))     (x (enc "h" (cat "h" k))) (a a) (b b) (t t))-  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 2) (0 3)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 2) (0 3)))   (non-orig (privk "sign" a))-  (operation encryption-test (displaced 1 2 init4 3)+  (operation encryption-test (added-strand init4 3)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 3))   (traces@@ -6247,6 +6224,23 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))+           (privk "sign" a)))))+    ((send+       (cat+         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))+         (enc m k)+         (enc "keytag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+         (enc "eootag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k))))+           (enc "keytag"+             (enc "h"+               (cat "h" a b t (enc "h" (cat "h" (enc m k)))+                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (recv         (enc "eortag"@@ -6256,7 +6250,7 @@           (enc "keytag"             (enc "h"               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                (enc "h" (cat "h" k)))) k r (pubk "encr" t))+                (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))           (privk "sign" b)))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))@@ -8148,14 +8142,13 @@   (comment "8 in cohort - 4 not yet seen"))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 1) (0 1)))+  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init2 2)+  (operation encryption-test (displaced 1 2 init2 2)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -8216,47 +8209,29 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))-           (privk "sign" a)))))-    ((send-       (cat-         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))-         (enc m k)-         (enc "keytag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))-         (enc "eootag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k))))-           (enc "keytag"-             (enc "h"-               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))           (enc "h" (cat "h" k)) (privk "sign" a)))))   (label 39)   (parent 38)-  (seen 40)   (unrealized)   (shape)   (maps     ((0)       ((a a) (b b) (t t) (r r) (k k)         (y (enc "h" (cat "h" (enc m k)))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init2 2)+  (operation encryption-test (added-strand init2 2)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -8317,6 +8292,23 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))+           (privk "sign" a)))))+    ((send+       (cat+         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))+         (enc m k)+         (enc "keytag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+         (enc "eootag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k))))+           (enc "keytag"+             (enc "h"+               (cat "h" a b t (enc "h" (cat "h" (enc m k)))+                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))@@ -8332,14 +8324,13 @@   (origs))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 2) (0 1)))+  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init4 3)+  (operation encryption-test (displaced 1 2 init4 3)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -8400,23 +8391,6 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))-           (privk "sign" a)))))-    ((send-       (cat-         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))-         (enc m k)-         (enc "keytag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))-         (enc "eootag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k))))-           (enc "keytag"-             (enc "h"-               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (recv         (enc "eortag"@@ -8426,31 +8400,30 @@           (enc "keytag"             (enc "h"               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+                (enc "h" (cat "h" k)))) k r (pubk "encr" t))           (privk "sign" b)))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))           (enc "h" (cat "h" k)) (privk "sign" a)))))   (label 41)   (parent 38)-  (seen 42)   (unrealized)   (shape)   (maps     ((0)       ((a a) (b b) (t t) (r r) (k k)         (y (enc "h" (cat "h" (enc m k)))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-rc2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 2) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init4 3)+  (operation encryption-test (added-strand init4 3)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -8511,6 +8484,23 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))+           (privk "sign" a)))))+    ((send+       (cat+         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))+         (enc m k)+         (enc "keytag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+         (enc "eootag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k))))+           (enc "keytag"+             (enc "h"+               (cat "h" a b t (enc "h" (cat "h" (enc m k)))+                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (recv         (enc "eortag"@@ -8520,7 +8510,7 @@           (enc "keytag"             (enc "h"               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                (enc "h" (cat "h" k)))) k r (pubk "encr" t))+                (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))           (privk "sign" b)))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))@@ -9143,14 +9133,13 @@   (comment "8 in cohort - 4 not yet seen"))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 1) (0 1)))+  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init2 2)+  (operation encryption-test (displaced 1 2 init2 2)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -9211,47 +9200,29 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))-           (privk "sign" a)))))-    ((send-       (cat-         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))-         (enc m k)-         (enc "keytag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))-         (enc "eootag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k))))-           (enc "keytag"-             (enc "h"-               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))           (enc "h" (cat "h" k)) (privk "sign" a)))))   (label 45)   (parent 44)-  (seen 46)   (unrealized)   (shape)   (maps     ((0)       ((a a) (b b) (t t) (r r) (k k)         (y (enc "h" (cat "h" (enc m k)))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init2 2 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 1) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init2 2 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 1) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init2 2)+  (operation encryption-test (added-strand init2 2)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -9312,6 +9283,23 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))+           (privk "sign" a)))))+    ((send+       (cat+         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))+         (enc m k)+         (enc "keytag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+         (enc "eootag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k))))+           (enc "keytag"+             (enc "h"+               (cat "h" a b t (enc "h" (cat "h" (enc m k)))+                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))@@ -9327,14 +9315,13 @@   (origs))  (defskeleton wang-  (vars (r r-0 text) (m data) (a b t name) (k skey))+  (vars (r text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))-  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((2 2) (0 1)))+  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((1 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (added-strand init4 3)+  (operation encryption-test (displaced 1 2 init4 3)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -9395,23 +9382,6 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))-           (privk "sign" a)))))-    ((send-       (cat-         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))-         (enc m k)-         (enc "keytag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))-         (enc "eootag"-           (enc "h"-             (cat "h" a b t (enc "h" (cat "h" (enc m k)))-               (enc "h" (cat "h" k))))-           (enc "keytag"-             (enc "h"-               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (recv         (enc "eortag"@@ -9421,31 +9391,30 @@           (enc "keytag"             (enc "h"               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+                (enc "h" (cat "h" k)))) k r (pubk "encr" t))           (privk "sign" b)))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))           (enc "h" (cat "h" k)) (privk "sign" a)))))   (label 47)   (parent 44)-  (seen 48)   (unrealized)   (shape)   (maps     ((0)       ((a a) (b b) (t t) (r r) (k k)         (y (enc "h" (cat "h" (enc m k)))))))-  (origs)-  (comment "1 in cohort - 0 not yet seen"))+  (origs))  (defskeleton wang-  (vars (r text) (m data) (a b t name) (k skey))+  (vars (r r-0 text) (m data) (a b t name) (k skey))   (defstrand ttp-cf2 3 (y (enc "h" (cat "h" (enc m k)))) (r r) (a a)     (b b) (t t) (k k))-  (defstrand init4 3 (r r) (m m) (a a) (b b) (t t) (k k))-  (precedes ((1 0) (0 0)) ((1 2) (0 1)))+  (defstrand init1 1 (r r) (m m) (a a) (b b) (t t) (k k))+  (defstrand init4 3 (r r-0) (m m) (a a) (b b) (t t) (k k))+  (precedes ((1 0) (0 0)) ((2 2) (0 1)))   (non-orig (privk "encr" t) (privk "sign" a))-  (operation encryption-test (displaced 1 2 init4 3)+  (operation encryption-test (added-strand init4 3)     (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))       (enc "h" (cat "h" k)) (privk "sign" a)) (0 1))   (traces@@ -9506,6 +9475,23 @@              (enc "h"                (cat "h" a b t (enc "h" (cat "h" (enc m k)))                  (enc "h" (cat "h" k)))) k r (pubk "encr" t))+           (privk "sign" a)))))+    ((send+       (cat+         (cat a b t (enc "h" (cat "h" (enc m k))) (enc "h" (cat "h" k)))+         (enc m k)+         (enc "keytag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))+         (enc "eootag"+           (enc "h"+             (cat "h" a b t (enc "h" (cat "h" (enc m k)))+               (enc "h" (cat "h" k))))+           (enc "keytag"+             (enc "h"+               (cat "h" a b t (enc "h" (cat "h" (enc m k)))+                 (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))            (privk "sign" a))))       (recv         (enc "eortag"@@ -9515,7 +9501,7 @@           (enc "keytag"             (enc "h"               (cat "h" a b t (enc "h" (cat "h" (enc m k)))-                (enc "h" (cat "h" k)))) k r (pubk "encr" t))+                (enc "h" (cat "h" k)))) k r-0 (pubk "encr" t))           (privk "sign" b)))       (send         (enc "abrq" a b t (enc "h" (cat "h" (enc m k)))
tst/weird.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol weird basic
tst/wide-mouth-frog-scyther.tst view
@@ -1,7 +1,7 @@ (herald "Wide-Mouth Frog Protocol from Scyther"   (comment "This protocol has an infinite number of shapes")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol wide-mouth-frog basic
tst/wide-mouth-frog.tst view
@@ -1,7 +1,7 @@ (herald "Wide-Mouth Frog Protocol"   (comment "This protocol has an infinite number of shapes")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol wide-mouth-frog basic
tst/wonthull.tst view
@@ -1,4 +1,4 @@-(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol wonthull basic@@ -22,18 +22,17 @@     ((send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))       (recv (enc "okay" x3 x4 (pubk a)))))   (label 0)-  (seen 1)   (unrealized (0 1))   (origs (x3 (0 0)) (x2 (0 0)) (x1 (0 0)))-  (comment "3 in cohort - 2 not yet seen"))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton wonthull   (vars (x1 x2 x4 text) (a name))   (defstrand init 2 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))   (non-orig (privk a))   (uniq-orig x1 x2)-  (operation nonce-test (added-strand init 1) x2 (0 1)-    (enc x2 x2 (pubk a)))+  (operation nonce-test (displaced 1 0 init 1) x3 (0 1)+    (enc x3 x2 (pubk a)))   (traces     ((send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))       (recv (enc "okay" x2 x4 (pubk a)))))@@ -60,7 +59,7 @@   (parent 0)   (seen 3)   (unrealized (0 1))-  (comment "3 in cohort - 1 not yet seen"))+  (comment "2 in cohort - 1 not yet seen"))  (defskeleton wonthull   (vars (x1 x2 x4 y3 text) (a name))
tst/wonthull2.tst view
@@ -1,2982 +1,2981 @@-(comment "CPSA 2.2.8")-(comment "All input read")--(defprotocol wonthull2 basic-  (defrole init-    (vars (a name) (x1 x2 x3 x4 text))-    (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    (non-orig (privk a))-    (uniq-orig x3))-  (defrole resp-    (vars (a name) (y1 y2 y3 text))-    (trace (recv (enc y1 y2 (pubk a)))-      (send (enc "okay" y3 y1 (pubk a))))))--(defskeleton wonthull2-  (vars (x1 x2 x3 x4 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))-  (non-orig (privk a))-  (uniq-orig x3)-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a)))))-  (label 0)-  (unrealized (0 1))-  (origs (x3 (0 0)))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x2 x4 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand resp 2) x1 (0 1)-    (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))-      (recv (enc "okay" x1 x4 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 1)-  (parent 0)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x2 x3 x4 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))-  (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (0 1)-    (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 2)-  (parent 0)-  (seen 4)-  (unrealized (0 1))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x2 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 3)-  (parent 1)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x2 x4 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand resp 2) x1 (0 1)-    (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))-    (enc x1 x2 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))-      (recv (enc "okay" x1 x4 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 4)-  (parent 1)-  (unrealized (0 1))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x2 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 1)-    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 x2 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 5)-  (parent 2)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))-  (origs (y3 (0 0))))--(defskeleton wonthull2-  (vars (x2 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3 y3-0)-  (operation generalization separated y3-0)-  (traces-    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))-      (recv (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3-0 (pubk a)))-      (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 6)-  (parent 3)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x2 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3-0) (x2 x2) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x2) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (contracted (x1 y3-0) (x4 y3-0)) y3-0 (0 1)-    (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))-    (enc y3-0 x2 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x2 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a)))))-  (label 7)-  (parent 4)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x2 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x2 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 8)-  (parent 4)-  (seen 3)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x2 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation generalization forgot y3)-  (traces-    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))-      (recv (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3-0 (pubk a)))-      (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 9)-  (parent 6)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3-0) (x4 y3))))-  (origs (y3 (0 0)) (y3-0 (0 0))))--(defskeleton wonthull2-  (vars (x2 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation generalization deleted (1 0))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 10)-  (parent 7)-  (seen 5)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(comment "Nothing left to do")--(defprotocol wonthull2 basic-  (defrole init-    (vars (a name) (x1 x2 x3 x4 text))-    (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    (non-orig (privk a))-    (uniq-orig x3))-  (defrole resp-    (vars (a name) (y1 y2 y3 text))-    (trace (recv (enc y1 y2 (pubk a)))-      (send (enc "okay" y3 y1 (pubk a))))))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 x3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3-0)-  (traces-    ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))-      (recv (enc "okay" x3-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0)))-      (send (enc "okay" x3 x1 (pubk a-0)))))-  (label 11)-  (seen 12)-  (unrealized (0 1))-  (origs (x3-0 (0 0)))-  (comment "7 in cohort - 5 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 1) x3 (0 1)-    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0)))-      (send (enc "okay" x3 x1 (pubk a-0)))))-  (label 12)-  (parent 11)-  (unrealized (1 0))-  (origs (x3 (0 0)))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1-0)-  (operation nonce-test (added-strand resp 2) x1-0 (0 1)-    (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))-  (traces-    ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))-      (recv (enc "okay" x1-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3 x1-0 (pubk a)))))-  (label 13)-  (parent 11)-  (seen 21)-  (unrealized (0 1))-  (comment "8 in cohort - 5 not yet seen"))--(defskeleton wonthull2-  (vars (x3 text) (a name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 2 1 resp 2) x1 (0 1)-    (enc x1 x3 (pubk a-0)) (enc x1 x1 (pubk a-0)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 14)-  (parent 11)-  (seen 18)-  (unrealized)-  (origs (x3 (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3-0)-  (operation nonce-test (added-strand resp 2) x3-0 (0 1)-    (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))-  (traces-    ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))-      (recv (enc "okay" x3-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3-0 x3 (pubk a)))-      (send (enc "okay" y3 x3-0 (pubk a)))))-  (label 15)-  (parent 11)-  (seen 21 22 24 26)-  (unrealized (0 1))-  (comment "8 in cohort - 3 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 text) (a name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 1)-    (enc x1-0 x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0)))-  (traces-    ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))-  (label 16)-  (parent 11)-  (seen 14 18 23 27)-  (unrealized (0 1))-  (origs (x1 (0 0)))-  (comment "7 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))-  (label 17)-  (parent 12)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))-  (origs (x3 (0 0))))--(defskeleton wonthull2-  (vars (x3 x1 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 18)-  (parent 12)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))-  (origs (x3 (0 0))))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0)-    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 19)-  (parent 12)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 20)-  (parent 13)-  (seen 34)-  (unrealized (1 0))-  (comment "6 in cohort - 5 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 1) x3 (0 1)-    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 21)-  (parent 13)-  (seen 24 35)-  (unrealized (1 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1-0)-  (operation nonce-test (added-strand resp 2) x1-0 (0 1)-    (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))-    (enc x1-0 x1-0 (pubk a)))-  (traces-    ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))-      (recv (enc "okay" x1-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3 x1-0 (pubk a))))-    ((recv (enc x1-0 x3 (pubk a)))-      (send (enc "okay" y3-0 x1-0 (pubk a)))))-  (label 22)-  (parent 13)-  (seen 21 39)-  (unrealized (0 1))-  (comment "9 in cohort - 5 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 1)-    (enc "okay" y3 x1-0 (pubk a-0)) (enc x1-0 x3 (pubk a-0))-    (enc x1-0 x1-0 (pubk a-0)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 23)-  (parent 13)-  (seen 24 30 40)-  (unrealized (0 1))-  (comment "9 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 3 1 resp 2) x1 (0 1)-    (enc "okay" y3 x1 (pubk a-0)) (enc x1 x3 (pubk a-0))-    (enc x1 x1 (pubk a-0)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 24)-  (parent 13)-  (seen 14)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 1)-    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 25)-  (parent 15)-  (seen 32 45)-  (unrealized (1 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 1) x3 (0 1)-    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1-0 x3 (pubk a)))-  (traces-    ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 26)-  (parent 15)-  (seen 19)-  (unrealized (1 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 x1-0 y3 text) (a name))-  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 3 1 resp 2) x3-0 (0 1)-    (enc "okay" y3 x3-0 (pubk a-0)) (enc x1-0 x3-0 (pubk a-0))-    (enc x3-0 x3 (pubk a-0)))-  (traces-    ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 27)-  (parent 15)-  (seen 24 40 42 47)-  (unrealized (0 1))-  (comment "9 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 28)-  (parent 19)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 29)-  (parent 19)-  (seen 18)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 30)-  (parent 20)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 31)-  (parent 20)-  (seen 53)-  (unrealized (1 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull2-  (vars (y3 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a-0))) (send (enc "okay" y3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 32)-  (parent 20)-  (seen 51)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 33)-  (parent 20)-  (seen 51 52 56)-  (unrealized (1 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 34)-  (parent 20)-  (seen 53 56)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0)-    (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 35)-  (parent 21)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)-    (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 36)-  (parent 21)-  (seen 54)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (contracted (x1 y3-0) (x1-0 y3-0)) y3-0 (0 1)-    (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a-0)))-      (send (enc "okay" x3 y3-0 (pubk a-0))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a)))))-  (label 37)-  (parent 22)-  (seen 43 63)-  (unrealized (1 0))-  (comment "9 in cohort - 6 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 38)-  (parent 22)-  (seen 31 62 64 68)-  (unrealized (1 0))-  (comment "9 in cohort - 4 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 1) x3 (0 1)-    (enc "okay" y3 x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a))-    (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 39)-  (parent 22)-  (seen 24 35 70)-  (unrealized (1 0))-  (comment "6 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 4 1 resp 2) x1-0 (0 1)-    (enc "okay" y3 x1-0 (pubk a-0)) (enc "okay" y3-0 x1-0 (pubk a-0))-    (enc x1-0 x3 (pubk a-0)) (enc x1-0 x1-0 (pubk a-0)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 40)-  (parent 22)-  (seen 24 41 60 66)-  (unrealized (0 1))-  (comment "11 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 4 1 resp 2) x1 (0 1)-    (enc "okay" y3 x1 (pubk a-0)) (enc "okay" y3-0 x1 (pubk a-0))-    (enc x1 x3 (pubk a-0)) (enc x1 x1 (pubk a-0)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 41)-  (parent 22)-  (seen 24)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 42)-  (parent 25)-  (seen 18)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))-  (origs (y3 (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand resp 2) x1 (1 0)-    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 43)-  (parent 25)-  (seen 51 73)-  (unrealized (1 0))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 44)-  (parent 25)-  (seen 51 72 75)-  (unrealized (1 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)-    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 45)-  (parent 25)-  (seen 73 75)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 46)-  (parent 26)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 47)-  (parent 26)-  (seen 18)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x1-0 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)-    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 48)-  (parent 26)-  (unrealized (1 0))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation generalization separated y3-0)-  (traces-    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3-0 (pubk a)))-      (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 49)-  (parent 30)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 50)-  (parent 31)-  (seen 30)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a-0))) (send (enc "okay" y3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 51)-  (parent 31)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 52)-  (parent 31)-  (seen 51 83)-  (unrealized (1 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 53)-  (parent 31)-  (seen 83)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 54)-  (parent 32)-  (seen 14)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 55)-  (parent 33)-  (seen 30)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 56)-  (parent 33)-  (seen 83)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 57)-  (parent 34)-  (seen 30)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1 x3) (a-0 a)) x3 (1 0)-    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 58)-  (parent 35)-  (seen 14)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 59)-  (parent 36)-  (seen 81)-  (unrealized (1 0))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a)))))-  (label 60)-  (parent 37)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (added-strand resp 2) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a-0)))-      (send (enc "okay" x3 y3-0 (pubk a-0))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-1 y3-0 (pubk a)))))-  (label 61)-  (parent 37)-  (seen 72 88)-  (unrealized (1 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton wonthull2-  (vars (y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3-0) (x2 y3-0) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a-0))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 y3-0 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a-0)))-      (send (enc "okay" y3-0 y3-0 (pubk a-0))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a)))))-  (label 62)-  (parent 37)-  (seen 51 58)-  (unrealized (1 0))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a-0)))-      (send (enc "okay" x3 y3-0 (pubk a-0))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a)))))-  (label 63)-  (parent 37)-  (seen 51 73 88)-  (unrealized (1 0))-  (comment "5 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 64)-  (parent 37)-  (seen 51)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 65)-  (parent 37)-  (seen 90)-  (unrealized (1 0))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 66)-  (parent 38)-  (seen 30)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 67)-  (parent 38)-  (seen 51 52 96)-  (unrealized (1 0))-  (comment "8 in cohort - 4 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 68)-  (parent 38)-  (seen 51 53 96)-  (unrealized (1 0))-  (comment "5 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 69)-  (parent 38)-  (seen 98)-  (unrealized (1 0))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)-    (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 70)-  (parent 39)-  (seen 59 92)-  (unrealized (1 0))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (contracted (a-0 a)) x1 (1 0)-    (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))-    (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 71)-  (parent 43)-  (seen 86)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand resp 2) x1 (1 0)-    (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))-    (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 72)-  (parent 43)-  (seen 103)-  (unrealized (1 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)-    (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))-    (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 73)-  (parent 43)-  (seen 103)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 74)-  (parent 44)-  (seen 42)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 75)-  (parent 44)-  (seen 103)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 76)-  (parent 45)-  (seen 42)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 77)-  (parent 48)-  (seen 18)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 78)-  (parent 48)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc x1-0 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 79)-  (parent 48)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a) (privk a-0))-  (uniq-orig y3-0)-  (operation generalization separated a-0)-  (traces-    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3-0 (pubk a)))-      (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 80)-  (parent 49)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 81)-  (parent 51)-  (seen 58)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 82)-  (parent 52)-  (seen 55)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)-    (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 83)-  (parent 52)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 84)-  (parent 53)-  (seen 57)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 85)-  (parent 56)-  (seen 57)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation generalization deleted (2 0))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 86)-  (parent 60)-  (seen 42)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)-    (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))-    (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-1 y3-0 (pubk a)))))-  (label 87)-  (parent 61)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (displaced 5 3 resp 2) y3-0 (1 0)-    (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))-    (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a-0)))-      (send (enc "okay" x3 y3-0 (pubk a-0))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-1 y3-0 (pubk a)))))-  (label 88)-  (parent 61)-  (seen 103)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 5 3 resp 2) y3-1 (1 0)-    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))-    (enc y3-1 y3-1 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 89)-  (parent 61)-  (seen 81)-  (unrealized (1 0))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 5 2 resp 2) y3-1 (1 0)-    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))-    (enc y3-1 y3-1 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 90)-  (parent 61)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)-    (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))-    (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a)))))-  (label 91)-  (parent 63)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (a-0 a)) x3 (1 0)-    (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 92)-  (parent 64)-  (seen 54)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 93)-  (parent 65)-  (seen 86)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 94)-  (parent 65)-  (seen 114)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 95)-  (parent 67)-  (seen 55)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 5 2 resp 2) y3 (1 0)-    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 96)-  (parent 67)-  (seen 83 104)-  (unrealized (1 0))-  (comment "4 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 5 3 resp 2) y3-1 (1 0)-    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))-    (enc y3-1 y3-1 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 97)-  (parent 67)-  (seen 51 58)-  (unrealized (1 0))-  (comment "3 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 5 3 resp 2) y3-1 (1 0)-    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))-    (enc y3-1 y3-1 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 98)-  (parent 67)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 99)-  (parent 68)-  (seen 57)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 100)-  (parent 69)-  (seen 115)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 101)-  (parent 69)-  (seen 119)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (contracted (a-0 a)) x1 (1 0)-    (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))-    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 102)-  (parent 72)-  (seen 111)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)-    (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))-    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 103)-  (parent 72)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)-    (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))-    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 104)-  (parent 72)-  (seen 81)-  (unrealized (1 0))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (contracted (a-0 a)) x1 (1 0)-    (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))-    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 105)-  (parent 73)-  (seen 115)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 106)-  (parent 75)-  (seen 76)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 107)-  (parent 79)-  (seen 29)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 108)-  (parent 79)-  (seen 28)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))-  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation generalization forgot (privk a-0))-  (traces-    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3-0 (pubk a)))-      (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 109)-  (parent 80)-  (seen 17)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3-0) (a-0 a-0))))-  (origs (y3-0 (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 110)-  (parent 83)-  (seen 85)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation generalization deleted (2 0))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 111)-  (parent 87)-  (seen 86)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3-0)-  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)-    (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))-    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))-  (traces-    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))-      (recv (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))-    ((recv (enc y3-0 y3-0 (pubk a)))-      (send (enc "okay" y3 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-0 y3-0 (pubk a))))-    ((recv (enc y3-0 x3 (pubk a)))-      (send (enc "okay" y3-1 y3-0 (pubk a)))))-  (label 112)-  (parent 88)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 113)-  (parent 90)-  (seen 111)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))-    ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))-    ((5 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 114)-  (parent 90)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation generalization deleted (2 0))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 115)-  (parent 91)-  (seen 86)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 116)-  (parent 94)-  (seen 71)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 117)-  (parent 96)-  (seen 85)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 118)-  (parent 98)-  (seen 105)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))-    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))-    ((5 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 119)-  (parent 98)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 120)-  (parent 101)-  (seen 122)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))-    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (contracted (a-0 a)) x1 (1 0)-    (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))-    (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))-    (enc x1 x1 (pubk a)))-  (traces-    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 121)-  (parent 103)-  (seen 122)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation generalization deleted (2 0))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 122)-  (parent 112)-  (seen 115)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull2-  (vars (x3 y3 y3-0 y3-1 text) (a name))-  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))-  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))-    ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))-    ((5 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0)-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))-  (label 123)-  (parent 114)-  (seen 102)+(comment "CPSA 2.2.9")+(comment "All input read")++(defprotocol wonthull2 basic+  (defrole init+    (vars (a name) (x1 x2 x3 x4 text))+    (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    (non-orig (privk a))+    (uniq-orig x3))+  (defrole resp+    (vars (a name) (y1 y2 y3 text))+    (trace (recv (enc y1 y2 (pubk a)))+      (send (enc "okay" y3 y1 (pubk a))))))++(defskeleton wonthull2+  (vars (x1 x2 x3 x4 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+  (non-orig (privk a))+  (uniq-orig x3)+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a)))))+  (label 0)+  (unrealized (0 1))+  (origs (x3 (0 0)))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x2 x4 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (0 1)+    (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+      (recv (enc "okay" x1 x4 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 1)+  (parent 0)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x2 x3 x4 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+  (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (0 1)+    (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 2)+  (parent 0)+  (seen 4)+  (unrealized (0 1))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x2 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 3)+  (parent 1)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x2 x4 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (0 1)+    (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a))+    (enc x1 x2 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x2 (pubk a))))+      (recv (enc "okay" x1 x4 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 4)+  (parent 1)+  (unrealized (0 1))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x2 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 1)+    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 x2 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x2 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 5)+  (parent 2)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))+  (origs (y3 (0 0))))++(defskeleton wonthull2+  (vars (x2 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3 y3-0)+  (operation generalization separated y3-0)+  (traces+    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))+      (recv (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3-0 (pubk a)))+      (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 6)+  (parent 3)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x2 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3-0) (x2 x2) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x2) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (contracted (x1 y3-0) (x4 y3-0)) y3-0 (0 1)+    (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))+    (enc y3-0 x2 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x2 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a)))))+  (label 7)+  (parent 4)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x2 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 1)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x2 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 8)+  (parent 4)+  (seen 3)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x2 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3-0) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation generalization forgot y3)+  (traces+    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x2 (pubk a))))+      (recv (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3-0 (pubk a)))+      (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 9)+  (parent 6)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (x1 y3) (x2 x2) (x3 y3-0) (x4 y3))))+  (origs (y3 (0 0)) (y3-0 (0 0))))++(defskeleton wonthull2+  (vars (x2 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation generalization deleted (1 0))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x2 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 10)+  (parent 7)+  (seen 5)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(comment "Nothing left to do")++(defprotocol wonthull2 basic+  (defrole init+    (vars (a name) (x1 x2 x3 x4 text))+    (trace (send (cat (enc x1 x3 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    (non-orig (privk a))+    (uniq-orig x3))+  (defrole resp+    (vars (a name) (y1 y2 y3 text))+    (trace (recv (enc y1 y2 (pubk a)))+      (send (enc "okay" y3 y1 (pubk a))))))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 x3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3-0)+  (traces+    ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))+      (recv (enc "okay" x3-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0)))+      (send (enc "okay" x3 x1 (pubk a-0)))))+  (label 11)+  (seen 12)+  (unrealized (0 1))+  (origs (x3-0 (0 0)))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 2 0 init 1) x3-0 (0 1)+    (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0)))+      (send (enc "okay" x3 x1 (pubk a-0)))))+  (label 12)+  (parent 11)+  (unrealized (1 0))+  (origs (x3 (0 0)))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x3 text) (a name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 2 1 resp 2) x1 (0 1)+    (enc x1 x3 (pubk a-0)) (enc x1 x1 (pubk a-0)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 13)+  (parent 11)+  (seen 18)+  (unrealized)+  (origs (x3 (0 0)))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1-0)+  (operation nonce-test (added-strand resp 2) x1-0 (0 1)+    (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+      (recv (enc "okay" x1-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3 x1-0 (pubk a)))))+  (label 14)+  (parent 11)+  (seen 21)+  (unrealized (0 1))+  (comment "7 in cohort - 5 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 text) (a name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 1)+    (enc x1-0 x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0)))+  (traces+    ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))+  (label 15)+  (parent 11)+  (seen 13 18 22)+  (unrealized (0 1))+  (origs (x1 (0 0)))+  (comment "6 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3-0)+  (operation nonce-test (added-strand resp 2) x3-0 (0 1)+    (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x3-0 (pubk a)) (enc x3-0 x3 (pubk a))))+      (recv (enc "okay" x3-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3-0 x3 (pubk a)))+      (send (enc "okay" y3 x3-0 (pubk a)))))+  (label 16)+  (parent 11)+  (seen 21 23 24 25 27)+  (unrealized (0 1))+  (comment "7 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))+  (label 17)+  (parent 12)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+  (origs (x3 (0 0))))++(defskeleton wonthull2+  (vars (x3 x1 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 18)+  (parent 12)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+  (origs (x3 (0 0))))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0)+    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 19)+  (parent 12)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 20)+  (parent 14)+  (seen 33)+  (unrealized (1 0))+  (comment "6 in cohort - 5 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 1) x1-0 (0 1)+    (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+    (enc x1-0 x1-0 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 21)+  (parent 14)+  (seen 24 35)+  (unrealized (1 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 1)+    (enc "okay" y3 x1-0 (pubk a-0)) (enc x1-0 x3 (pubk a-0))+    (enc x1-0 x1-0 (pubk a-0)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 22)+  (parent 14)+  (seen 24 30)+  (unrealized (0 1))+  (comment "8 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1-0)+  (operation nonce-test (added-strand resp 2) x1-0 (0 1)+    (enc "okay" y3 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))+    (enc x1-0 x1-0 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x3 (pubk a))))+      (recv (enc "okay" x1-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3 x1-0 (pubk a))))+    ((recv (enc x1-0 x3 (pubk a)))+      (send (enc "okay" y3-0 x1-0 (pubk a)))))+  (label 23)+  (parent 14)+  (seen 21 37 40)+  (unrealized (0 1))+  (comment "8 in cohort - 4 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 1 resp 2) x1 (0 1)+    (enc "okay" y3 x1 (pubk a-0)) (enc x1 x3 (pubk a-0))+    (enc x1 x1 (pubk a-0)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 24)+  (parent 14)+  (seen 13)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 y3 text) (a name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (0 1)+    (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a))+    (enc x1-0 x1 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 25)+  (parent 15)+  (seen 24 37 42 43)+  (unrealized (0 1))+  (comment "8 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 1)+    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 26)+  (parent 16)+  (seen 31 42 45)+  (unrealized (1 0))+  (comment "6 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 1) x3-0 (0 1)+    (enc "okay" y3 x3-0 (pubk a)) (enc x1-0 x3-0 (pubk a))+    (enc x3-0 x3 (pubk a)))+  (traces+    ((send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 27)+  (parent 16)+  (seen 19 43)+  (unrealized (1 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 28)+  (parent 19)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 29)+  (parent 19)+  (seen 18)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 30)+  (parent 20)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (y3 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a-0))) (send (enc "okay" y3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 31)+  (parent 20)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 32)+  (parent 20)+  (seen 51 53)+  (unrealized (1 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 33)+  (parent 20)+  (seen 53)+  (unrealized (1 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 34)+  (parent 20)+  (seen 51 54 56)+  (unrealized (1 0))+  (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+    (enc x3 x3 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 35)+  (parent 21)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+    (enc x3 x3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 36)+  (parent 21)+  (seen 50)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (0 1)+    (enc "okay" x3 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+    (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 37)+  (parent 22)+  (seen 24 41 60 61)+  (unrealized (0 1))+  (comment "10 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (contracted (x1 y3-0) (x1-0 y3-0)) y3-0 (0 1)+    (enc "okay" y3 y3-0 (pubk a)) (enc "okay" y3-0 y3-0 (pubk a))+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a-0)))+      (send (enc "okay" x3 y3-0 (pubk a-0))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a)))))+  (label 38)+  (parent 23)+  (seen 44 60 63)+  (unrealized (1 0))+  (comment "9 in cohort - 5 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 1)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 39)+  (parent 23)+  (seen 32 61 62 65 67)+  (unrealized (1 0))+  (comment "9 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 0 init 1) x1-0 (0 1)+    (enc "okay" y3 x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+    (enc x1-0 x3 (pubk a)) (enc x1-0 x1-0 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 40)+  (parent 23)+  (seen 24 35 70)+  (unrealized (1 0))+  (comment "6 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 1 resp 2) x1 (0 1)+    (enc "okay" y3 x1 (pubk a-0)) (enc "okay" y3-0 x1 (pubk a-0))+    (enc x1 x3 (pubk a-0)) (enc x1 x1 (pubk a-0)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 41)+  (parent 23)+  (seen 24)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3)) y3 (0 1)+    (enc "okay" x3 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 42)+  (parent 25)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+  (origs (y3 (0 0))))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x3)) x3 (0 1)+    (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 43)+  (parent 25)+  (seen 18)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (1 0)+    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 44)+  (parent 26)+  (seen 51 72)+  (unrealized (1 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 45)+  (parent 26)+  (seen 72)+  (unrealized (1 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 46)+  (parent 26)+  (seen 51 73 75)+  (unrealized (1 0))+  (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 47)+  (parent 27)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x1-0 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+  (traces+    ((send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 48)+  (parent 27)+  (unrealized (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation generalization separated y3-0)+  (traces+    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3-0 (pubk a)))+      (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 49)+  (parent 30)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 50)+  (parent 31)+  (seen 13)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a-0))) (send (enc "okay" y3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 51)+  (parent 31)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 52)+  (parent 32)+  (seen 30)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 53)+  (parent 32)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 54)+  (parent 32)+  (seen 51 83)+  (unrealized (1 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 55)+  (parent 33)+  (seen 30)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 56)+  (parent 33)+  (seen 83)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 57)+  (parent 34)+  (seen 30)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1 x3) (a-0 a)) x3 (1 0)+    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 58)+  (parent 35)+  (seen 13)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 59)+  (parent 36)+  (seen 81)+  (unrealized (1 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (contracted (x1 y3-0)) y3-0 (0 1)+    (enc "okay" x3 y3-0 (pubk a)) (enc "okay" y3 y3-0 (pubk a))+    (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+    (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a)))))+  (label 60)+  (parent 37)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3)) y3 (0 1)+    (enc "okay" x3 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 61)+  (parent 37)+  (seen 30)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3-0) (x2 y3-0) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a-0))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 y3-0 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a-0)))+      (send (enc "okay" y3-0 y3-0 (pubk a-0))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a)))))+  (label 62)+  (parent 38)+  (seen 51 58)+  (unrealized (1 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a-0)))+      (send (enc "okay" x3 y3-0 (pubk a-0))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a)))))+  (label 63)+  (parent 38)+  (seen 51 72)+  (unrealized (1 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (added-strand resp 2) y3-0 (1 0)+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a-0)))+      (send (enc "okay" x3 y3-0 (pubk a-0))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-1 y3-0 (pubk a)))))+  (label 64)+  (parent 38)+  (seen 73 88)+  (unrealized (1 0))+  (comment "7 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 65)+  (parent 38)+  (seen 51)+  (unrealized (1 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) y3-0 (1 0)+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 66)+  (parent 38)+  (seen 91)+  (unrealized (1 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 67)+  (parent 39)+  (seen 51 53)+  (unrealized (1 0))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 68)+  (parent 39)+  (seen 51 54 96)+  (unrealized (1 0))+  (comment "8 in cohort - 3 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 3 resp 2) y3-0 (1 0)+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 69)+  (parent 39)+  (seen 99)+  (unrealized (1 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)+    (enc x3 x3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 70)+  (parent 40)+  (seen 59 92)+  (unrealized (1 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (contracted (a-0 a)) x1 (1 0)+    (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+    (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 71)+  (parent 44)+  (seen 86)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 4 2 resp 2) x1 (1 0)+    (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+    (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 72)+  (parent 44)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (1 0)+    (enc "okay" y3 x1 (pubk a)) (enc x1 x3 (pubk a))+    (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 73)+  (parent 44)+  (seen 103)+  (unrealized (1 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 74)+  (parent 45)+  (seen 42)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 75)+  (parent 45)+  (seen 103)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 76)+  (parent 46)+  (seen 42)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 77)+  (parent 48)+  (seen 18)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 78)+  (parent 48)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc x1-0 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 79)+  (parent 48)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a) (privk a-0))+  (uniq-orig y3-0)+  (operation generalization separated a-0)+  (traces+    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3-0 (pubk a)))+      (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 80)+  (parent 49)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 81)+  (parent 51)+  (seen 58)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 82)+  (parent 53)+  (seen 55)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 83)+  (parent 53)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3-0 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 84)+  (parent 54)+  (seen 57)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 85)+  (parent 56)+  (seen 55)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation generalization deleted (2 0))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 86)+  (parent 60)+  (seen 42)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+    (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+    (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a)))))+  (label 87)+  (parent 63)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (added-strand resp 2) y3-0 (1 0)+    (enc "okay" y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+    (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a-0)))+      (send (enc "okay" x3 y3-0 (pubk a-0))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-1 y3-0 (pubk a)))))+  (label 88)+  (parent 63)+  (seen 103)+  (unrealized (1 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+    (enc "okay" y3-1 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))+    (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-1 y3-0 (pubk a)))))+  (label 89)+  (parent 64)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 5 3 resp 2) y3-1 (1 0)+    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))+    (enc y3-1 y3-1 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 90)+  (parent 64)+  (seen 81)+  (unrealized (1 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 5 2 resp 2) y3-1 (1 0)+    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))+    (enc y3-1 y3-1 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 91)+  (parent 64)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (a-0 a)) x3 (1 0)+    (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 92)+  (parent 65)+  (seen 50)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 93)+  (parent 66)+  (seen 86)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 94)+  (parent 66)+  (seen 115)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 95)+  (parent 67)+  (seen 55)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 96)+  (parent 67)+  (seen 83 105)+  (unrealized (1 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 97)+  (parent 68)+  (seen 57)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 5 3 resp 2) y3-1 (1 0)+    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))+    (enc y3-1 y3-1 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 98)+  (parent 68)+  (seen 51 58)+  (unrealized (1 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 5 3 resp 2) y3-1 (1 0)+    (enc "okay" y3-0 y3-1 (pubk a)) (enc y3-1 x3 (pubk a))+    (enc y3-1 y3-1 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 99)+  (parent 68)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 100)+  (parent 69)+  (seen 111)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 101)+  (parent 69)+  (seen 119)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (contracted (a-0 a)) x1 (1 0)+    (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 102)+  (parent 72)+  (seen 111)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (1 0)+    (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 103)+  (parent 72)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (contracted (a-0 a)) x1 (1 0)+    (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 104)+  (parent 73)+  (seen 113)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 5 2 resp 2) x1 (1 0)+    (enc "okay" y3 x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+    (enc x1 x3 (pubk a)) (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 105)+  (parent 73)+  (seen 81)+  (unrealized (1 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 106)+  (parent 75)+  (seen 74)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 107)+  (parent 79)+  (seen 29)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 108)+  (parent 79)+  (seen 28)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3-0) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3-0) (y3 y3-0) (a a))+  (precedes ((0 0) (1 0)) ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (0 1)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation generalization forgot (privk a-0))+  (traces+    ((send (cat (enc y3 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3-0 (pubk a)))+      (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 109)+  (parent 80)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 y3) (x3-0 y3-0) (a-0 a-0))))+  (origs (y3-0 (0 0))))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 110)+  (parent 83)+  (seen 85)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((1 1) (0 1)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation generalization deleted (2 0))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 111)+  (parent 87)+  (seen 86)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3-0) (x2 x3) (x3 y3-0) (x4 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 y3-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3-0) (y2 x3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3-0)+  (operation nonce-test (contracted (a-0 a)) y3-0 (1 0)+    (enc "okay" y3-0 y3-0 (pubk a)) (enc "okay" y3-1 y3-0 (pubk a))+    (enc y3-0 x3 (pubk a)) (enc y3-0 y3-0 (pubk a)))+  (traces+    ((send (cat (enc y3-0 y3-0 (pubk a)) (enc y3-0 x3 (pubk a))))+      (recv (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a))) (send (enc "okay" x3 y3-0 (pubk a))))+    ((recv (enc y3-0 y3-0 (pubk a)))+      (send (enc "okay" y3 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-0 y3-0 (pubk a))))+    ((recv (enc y3-0 x3 (pubk a)))+      (send (enc "okay" y3-1 y3-0 (pubk a)))))+  (label 112)+  (parent 88)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (0 1))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation generalization deleted (2 0))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 113)+  (parent 89)+  (seen 86)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 114)+  (parent 91)+  (seen 113)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+    ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 115)+  (parent 91)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 116)+  (parent 94)+  (seen 71)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-1 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 117)+  (parent 96)+  (seen 85)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 118)+  (parent 99)+  (seen 102)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a a-0 name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+    ((1 1) (0 1)) ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 119)+  (parent 99)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (0 1)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 120)+  (parent 101)+  (seen 122)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((1 1) (0 1))+    ((2 1) (1 0)) ((3 1) (1 0)) ((4 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (contracted (a-0 a)) x1 (1 0)+    (enc "okay" x1 x1 (pubk a)) (enc "okay" y3 x1 (pubk a))+    (enc "okay" y3-0 x1 (pubk a)) (enc x1 x3 (pubk a))+    (enc x1 x1 (pubk a)))+  (traces+    ((send (cat (enc x1 x1 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 121)+  (parent 103)+  (seen 122)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((1 1) (0 1)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation generalization deleted (2 0))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 122)+  (parent 112)+  (seen 111)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull2+  (vars (x3 y3 y3-0 y3-1 text) (a name))+  (defstrand init 2 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-1) (a a))+  (precedes ((0 0) (2 0)) ((0 0) (3 0)) ((0 0) (4 0)) ((0 0) (5 0))+    ((1 1) (0 1)) ((2 1) (1 0)) ((3 1) (0 1)) ((4 1) (1 0))+    ((5 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0)+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc "okay" y3-1 y3 (pubk a)) (enc y3 x3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (cat (enc y3 y3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-1 y3 (pubk a)))))+  (label 123)+  (parent 115)+  (seen 104)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/wonthull3.tst view
@@ -1,2268 +1,2262 @@-(comment "CPSA 2.2.8")-(comment "All input read")--(defprotocol wonthull3 basic-  (defrole init-    (vars (a name) (x1 x2 x3 x4 text))-    (trace (send (enc x3 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    (non-orig (privk a))-    (uniq-orig x3))-  (defrole resp-    (vars (a name) (y1 y2 y3 text))-    (trace (recv (enc y1 y2 (pubk a)))-      (send (enc "okay" y3 y1 (pubk a))))))--(defskeleton wonthull3-  (vars (x1 x2 x3 x4 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))-  (non-orig (privk a))-  (uniq-orig x3)-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a)))))-  (label 0)-  (seen 1)-  (unrealized (0 2))-  (origs (x3 (0 0)))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 x4 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))-  (non-orig (privk a))-  (uniq-orig x2)-  (operation nonce-test (added-strand init 2) x2 (0 2) (enc x2 (pubk a))-    (enc x2 x2 (pubk a)))-  (traces-    ((send (enc x2 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))-      (recv (enc "okay" x2 x4 (pubk a)))))-  (label 1)-  (parent 0)-  (unrealized (0 2))-  (origs (x2 (0 0)))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 x3 x4 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))-  (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (0 2) (enc x3 (pubk a))-    (enc x3 x2 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 2)-  (parent 0)-  (seen 4 5 6)-  (unrealized (0 2) (1 0))-  (comment "6 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 x4 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))-  (defstrand resp 2 (y1 x2) (y2 x2) (y3 y3) (a a))-  (precedes ((0 0) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x2)-  (operation nonce-test (added-strand resp 2) x2 (0 2) (enc x2 (pubk a))-    (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a)))-  (traces-    ((send (enc x2 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))-      (recv (enc "okay" x2 x4 (pubk a))))-    ((recv (enc x2 x2 (pubk a))) (send (enc "okay" y3 x2 (pubk a)))))-  (label 3)-  (parent 1)-  (seen 5 7)-  (unrealized (0 2) (1 0))-  (comment "6 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 x4 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))-  (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand init 2) x1 (1 0)-    (enc x1 (pubk a)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x1 x2 (pubk a))))-      (recv (enc "okay" x1 x4 (pubk a))))-    ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 4)-  (parent 2)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 x4 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))-  (defstrand resp 2 (y1 x2) (y2 x2) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x2)-  (operation nonce-test (added-strand init 2) x2 (1 0)-    (enc x2 (pubk a)))-  (traces-    ((send (enc x2 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))-      (recv (enc "okay" x2 x4 (pubk a))))-    ((recv (enc x2 x2 (pubk a))) (send (enc "okay" y3 x2 (pubk a)))))-  (label 5)-  (parent 2)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 x3 x4 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))-  (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (1 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 6)-  (parent 2)-  (seen 5)-  (unrealized (0 2))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x4 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x4) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand init 2) x1 (1 0)-    (enc x1 (pubk a)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))-      (recv (enc "okay" x1 x4 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 7)-  (parent 3)-  (unrealized (0 2))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x2 y3 text) (a name))-  (defstrand init 3 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 2)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x2 (pubk a)) (enc y3 x2 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 8)-  (parent 4)-  (seen 10)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x2 y3) (x4 y3)) y3 (0 2)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 9)-  (parent 5)-  (seen 10)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x2 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 2)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc y3 x2 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 10)-  (parent 6)-  (unrealized)-  (shape)-  (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))-  (origs (y3 (0 0))))--(defskeleton wonthull3-  (vars (y3 text) (a name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 2)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 11)-  (parent 7)-  (seen 9)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(comment "Nothing left to do")--(defprotocol wonthull3 basic-  (defrole init-    (vars (a name) (x1 x2 x3 x4 text))-    (trace (send (enc x3 (pubk a)))-      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))-      (recv (enc "okay" x3 x4 (pubk a))))-    (non-orig (privk a))-    (uniq-orig x3))-  (defrole resp-    (vars (a name) (y1 y2 y3 text))-    (trace (recv (enc y1 y2 (pubk a)))-      (send (enc "okay" y3 y1 (pubk a))))))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 x3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3-0)-  (traces-    ((send (enc x3-0 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3-0 x3 (pubk a))))-      (recv (enc "okay" x3-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0)))-      (send (enc "okay" x3 x1 (pubk a-0)))))-  (label 12)-  (seen 13)-  (unrealized (0 2))-  (origs (x3-0 (0 0)))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (0 2) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0)))-      (send (enc "okay" x3 x1 (pubk a-0)))))-  (label 13)-  (parent 12)-  (unrealized (1 0))-  (origs (x3 (0 0)))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3-0)-  (operation nonce-test (added-strand resp 2) x3-0 (0 2)-    (enc x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))-  (traces-    ((send (enc x3-0 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3-0 x3 (pubk a))))-      (recv (enc "okay" x3-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3-0 x3 (pubk a)))-      (send (enc "okay" y3 x3-0 (pubk a)))))-  (label 14)-  (parent 12)-  (seen 19 20 21)-  (unrealized (0 2) (2 0))-  (comment "7 in cohort - 4 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 text) (a name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 2)-    (enc x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))-  (label 15)-  (parent 12)-  (seen 17)-  (unrealized (0 2))-  (origs (x1 (0 0)))-  (comment "5 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))-  (label 16)-  (parent 13)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))-  (origs (x3 (0 0))))--(defskeleton wonthull3-  (vars (x3 x1 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 17)-  (parent 13)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))-  (origs (x3 (0 0))))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 18)-  (parent 13)-  (seen 24 25)-  (unrealized (1 0) (2 0))-  (comment "6 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1-0)-  (operation nonce-test (added-strand init 2) x1-0 (2 0)-    (enc x1-0 (pubk a)))-  (traces-    ((send (enc x1-0 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x1-0 x3 (pubk a))))-      (recv (enc "okay" x1-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x1-0 x3 (pubk a)))-      (send (enc "okay" y3 x1-0 (pubk a)))))-  (label 19)-  (parent 14)-  (seen 27)-  (unrealized (0 2))-  (comment "5 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (2 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 20)-  (parent 14)-  (seen 25)-  (unrealized (1 0))-  (comment "5 in cohort - 4 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3-0)-  (operation nonce-test (added-strand init 2) x3-0 (2 0)-    (enc x3-0 (pubk a)))-  (traces-    ((send (enc x3-0 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3-0 x3 (pubk a))))-      (recv (enc "okay" x3-0 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3-0 x3 (pubk a)))-      (send (enc "okay" y3 x3-0 (pubk a)))))-  (label 21)-  (parent 14)-  (seen 20)-  (unrealized (0 2))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 3 1 resp 2) x3-0 (2 0)-    (enc x3-0 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 22)-  (parent 14)-  (unrealized (1 0))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (2 0)) ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (added-strand resp 2) x1 (0 2) (enc x1 (pubk a))-    (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 23)-  (parent 15)-  (seen 28 30 34 36)-  (unrealized (0 2) (2 0))-  (comment "7 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1-0)-  (operation nonce-test (added-strand init 2) x1-0 (2 0)-    (enc x1-0 (pubk a)))-  (traces-    ((send (enc x1-0 (pubk a)))-      (send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))-      (recv (enc "okay" x1-0 x1 (pubk a))))-    ((recv (enc x1 x1-0 (pubk a-0)))-      (send (enc "okay" x1-0 x1 (pubk a-0))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3 x1-0 (pubk a)))))-  (label 24)-  (parent 18)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (2 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 25)-  (parent 18)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 2)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 26)-  (parent 19)-  (seen 43)-  (unrealized (1 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (0 2) (enc x3 (pubk a))-    (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 27)-  (parent 19)-  (seen 24)-  (unrealized (1 0))-  (comment "4 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 3 1 resp 2) x1-0 (0 2)-    (enc x1-0 (pubk a-0)) (enc "okay" y3 x1-0 (pubk a-0))-    (enc x1-0 x3 (pubk a-0)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 28)-  (parent 19)-  (seen 41 44)-  (unrealized (0 2))-  (comment "6 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 29)-  (parent 20)-  (seen 16)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 30)-  (parent 20)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))-    ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 31)-  (parent 20)-  (seen 25 47)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 32)-  (parent 20)-  (unrealized (1 0))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 2)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 33)-  (parent 21)-  (seen 53 55)-  (unrealized (1 0))-  (comment "6 in cohort - 4 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 text) (a name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (displaced 3 1 resp 2) x3-0 (0 2)-    (enc x3-0 (pubk a-0)) (enc "okay" y3 x3-0 (pubk a-0))-    (enc x3-0 x3 (pubk a-0)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x1 x3 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 34)-  (parent 21)-  (seen 30 52)-  (unrealized (0 2))-  (comment "6 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 35)-  (parent 22)-  (seen 16)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 36)-  (parent 22)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 37)-  (parent 22)-  (seen 56 57)-  (unrealized (1 0) (3 0))-  (comment "6 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)-    (enc x1 (pubk a)) (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))-  (label 38)-  (parent 24)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 39)-  (parent 25)-  (seen 16)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 40)-  (parent 25)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 41)-  (parent 26)-  (seen 52)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))-    ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 42)-  (parent 26)-  (seen 59 60)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)-    (enc y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 43)-  (parent 26)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a name))-  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1 x3) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 44)-  (parent 27)-  (seen 58)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))-    ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 45)-  (parent 27)-  (seen 24)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 46)-  (parent 27)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1-0)-  (operation nonce-test (added-strand init 2) x1-0 (3 0)-    (enc x1-0 (pubk a)))-  (traces-    ((send (enc x1-0 (pubk a)))-      (send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))-      (recv (enc "okay" x1-0 x1 (pubk a))))-    ((recv (enc x1 x1-0 (pubk a-0)))-      (send (enc "okay" x1-0 x1 (pubk a-0))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3 x1-0 (pubk a))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3-0 x1-0 (pubk a)))))-  (label 47)-  (parent 31)-  (seen 38)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) x3 (3 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 48)-  (parent 31)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 49)-  (parent 32)-  (seen 17)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 50)-  (parent 32)-  (seen 16)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc x1-0 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 51)-  (parent 32)-  (seen 48 67 70)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 52)-  (parent 33)-  (seen 17)-  (unrealized)-  (shape)-  (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))-  (origs (y3 (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (1 0) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 53)-  (parent 33)-  (seen 17 72)-  (unrealized (1 0))-  (comment "10 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))-    ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 54)-  (parent 33)-  (seen 59 73 74)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 3 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)-    (enc y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 55)-  (parent 33)-  (seen 72)-  (unrealized (1 0))-  (comment "4 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))-  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1-0)-  (operation nonce-test (added-strand init 2) x1-0 (3 0)-    (enc x1-0 (pubk a)))-  (traces-    ((send (enc x1-0 (pubk a)))-      (send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))-      (recv (enc "okay" x1-0 x1 (pubk a))))-    ((recv (enc x1 x1-0 (pubk a-0)))-      (send (enc "okay" x1-0 x1 (pubk a-0))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3 x1-0 (pubk a))))-    ((recv (enc x1-0 x1-0 (pubk a)))-      (send (enc "okay" y3-0 x1-0 (pubk a)))))-  (label 56)-  (parent 37)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (3 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 57)-  (parent 37)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x1 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))-  (precedes ((0 1) (1 0)) ((1 1) (0 2)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation generalization deleted (2 0))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))-  (label 58)-  (parent 38)-  (seen 17)-  (unrealized)-  (origs (x1 (0 0)))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand init 2) y3 (3 0)-    (enc y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 59)-  (parent 42)-  (seen 82)-  (unrealized (1 0))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (3 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 60)-  (parent 42)-  (seen 38 83)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (3 0)-    (enc y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 61)-  (parent 42)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 62)-  (parent 43)-  (seen 41)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 63)-  (parent 43)-  (seen 61 82 83)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) x3 (3 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 64)-  (parent 45)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (y3 text) (a name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 65)-  (parent 46)-  (seen 58)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 66)-  (parent 46)-  (seen 64 67)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)-    (enc x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))-    (enc x1-0 x1-0 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 67)-  (parent 47)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 68)-  (parent 48)-  (seen 40)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 69)-  (parent 48)-  (seen 39)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand init 2) y3 (3 0)-    (enc y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 70)-  (parent 51)-  (unrealized (1 0))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))-    ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))-    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 71)-  (parent 53)-  (seen 60 73)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)-    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))-  (label 72)-  (parent 53)-  (seen 49)-  (unrealized (1 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand init 2) x3 (3 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 73)-  (parent 54)-  (seen 40 91)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand init 2) y3 (3 0)-    (enc y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 74)-  (parent 54)-  (seen 73 93)-  (unrealized (1 0))-  (comment "5 in cohort - 2 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (3 0)-    (enc y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 75)-  (parent 54)-  (seen 89)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))-  (label 76)-  (parent 55)-  (seen 52)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 77)-  (parent 55)-  (seen 75 82 91 93)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))-  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))-  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x1)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)-    (enc x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))-    (enc x1 x1 (pubk a)))-  (traces-    ((send (enc x1 (pubk a)))-      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))-      (recv (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))-  (label 78)-  (parent 56)-  (seen 38)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 79)-  (parent 57)-  (seen 39)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)-    (enc x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))-  (label 80)-  (parent 57)-  (seen 40)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 81)-  (parent 59)-  (seen 41)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 82)-  (parent 59)-  (unrealized (1 0))-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)-    (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 83)-  (parent 60)-  (seen 86)-  (unrealized (1 0))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 84)-  (parent 61)-  (seen 62)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (y3 y3-0 text) (a name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 85)-  (parent 64)-  (seen 38)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (y3 y3-0 text) (a name))-  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 86)-  (parent 67)-  (seen 38)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 87)-  (parent 70)-  (seen 40)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))-  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))-    (enc y3 y3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))-      (recv (enc "okay" y3 x1 (pubk a))))-    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 88)-  (parent 70)-  (seen 39)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 4 2 resp 2) x3 (3 0)-    (enc x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 89)-  (parent 71)-  (seen 68)-  (unrealized (1 0))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))-    (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 90)-  (parent 72)-  (seen 83 89 91)-  (unrealized (1 0) (3 0))-  (comment "7 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig x3)-  (operation nonce-test (displaced 4 2 resp 2) x3 (1 0)-    (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))-    (enc x1 x3 (pubk a)))-  (traces-    ((send (enc x3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))-      (recv (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))-    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))-  (label 91)-  (parent 73)-  (seen 87)-  (unrealized (1 0))-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 92)-  (parent 74)-  (seen 52)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a a-0 name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (displaced 4 2 resp 2) y3 (1 0)-    (enc y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 93)-  (parent 74)-  (seen 91)-  (unrealized (1 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 94)-  (parent 75)-  (seen 76)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 95)-  (parent 82)-  (seen 62)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton wonthull3-  (vars (x3 x1 y3 y3-0 text) (a name))-  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))-  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))-  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))-    ((3 1) (1 0)))-  (non-orig (privk a))-  (uniq-orig y3)-  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))-    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))-    (enc y3 x3 (pubk a)))-  (traces-    ((send (enc y3 (pubk a)))-      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))-      (recv (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))-    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))-  (label 96)-  (parent 93)-  (seen 76)+(comment "CPSA 2.2.9")+(comment "All input read")++(defprotocol wonthull3 basic+  (defrole init+    (vars (a name) (x1 x2 x3 x4 text))+    (trace (send (enc x3 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    (non-orig (privk a))+    (uniq-orig x3))+  (defrole resp+    (vars (a name) (y1 y2 y3 text))+    (trace (recv (enc y1 y2 (pubk a)))+      (send (enc "okay" y3 y1 (pubk a))))))++(defskeleton wonthull3+  (vars (x1 x2 x3 x4 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+  (non-orig (privk a))+  (uniq-orig x3)+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a)))))+  (label 0)+  (unrealized (0 2))+  (origs (x3 (0 0)))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 x4 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))+  (non-orig (privk a))+  (uniq-orig x2)+  (operation nonce-test (displaced 1 0 init 2) x3 (0 2)+    (enc x3 (pubk a)) (enc x3 x2 (pubk a)))+  (traces+    ((send (enc x2 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))+      (recv (enc "okay" x2 x4 (pubk a)))))+  (label 1)+  (parent 0)+  (unrealized (0 2))+  (origs (x2 (0 0)))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 x3 x4 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+  (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (0 2) (enc x3 (pubk a))+    (enc x3 x2 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 2)+  (parent 0)+  (unrealized (0 2) (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 x4 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))+  (defstrand resp 2 (y1 x2) (y2 x2) (y3 y3) (a a))+  (precedes ((0 0) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x2)+  (operation nonce-test (added-strand resp 2) x2 (0 2) (enc x2 (pubk a))+    (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a)))+  (traces+    ((send (enc x2 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))+      (recv (enc "okay" x2 x4 (pubk a))))+    ((recv (enc x2 x2 (pubk a))) (send (enc "okay" y3 x2 (pubk a)))))+  (label 3)+  (parent 1)+  (seen 5)+  (unrealized (0 2) (1 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 x4 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x1) (x4 x4) (a a))+  (defstrand resp 2 (y1 x1) (y2 x2) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 2 0 init 2) x3 (1 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x1 x2 (pubk a))))+      (recv (enc "okay" x1 x4 (pubk a))))+    ((recv (enc x1 x2 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 4)+  (parent 2)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 x4 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x2) (x4 x4) (a a))+  (defstrand resp 2 (y1 x2) (y2 x2) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x2)+  (operation nonce-test (displaced 2 0 init 2) x3 (1 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x2 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x2 x2 (pubk a))))+      (recv (enc "okay" x2 x4 (pubk a))))+    ((recv (enc x2 x2 (pubk a))) (send (enc "okay" y3 x2 (pubk a)))))+  (label 5)+  (parent 2)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 x3 x4 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 x3) (x4 x4) (a a))+  (defstrand resp 2 (y1 x3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 2 0 init 2) x3 (1 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    ((recv (enc x3 x2 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 6)+  (parent 2)+  (seen 5)+  (unrealized (0 2))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x4 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x4) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 2 0 init 2) x2 (1 0)+    (enc x2 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+      (recv (enc "okay" x1 x4 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 7)+  (parent 3)+  (unrealized (0 2))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x2 y3 text) (a name))+  (defstrand init 3 (x1 y3) (x2 x2) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x2 (pubk a)) (enc y3 x2 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 8)+  (parent 4)+  (seen 10)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x2 y3) (x4 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 9)+  (parent 5)+  (seen 10)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x2 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x2) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x2) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x3 y3) (x4 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x2 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc y3 x2 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x2 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 10)+  (parent 6)+  (unrealized)+  (shape)+  (maps ((0) ((a a) (x1 x1) (x2 x2) (x3 y3) (x4 y3))))+  (origs (y3 (0 0))))++(defskeleton wonthull3+  (vars (y3 text) (a name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x4 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 11)+  (parent 7)+  (seen 9)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(comment "Nothing left to do")++(defprotocol wonthull3 basic+  (defrole init+    (vars (a name) (x1 x2 x3 x4 text))+    (trace (send (enc x3 (pubk a)))+      (send (cat (enc x1 x2 (pubk a)) (enc x3 x2 (pubk a))))+      (recv (enc "okay" x3 x4 (pubk a))))+    (non-orig (privk a))+    (uniq-orig x3))+  (defrole resp+    (vars (a name) (y1 y2 y3 text))+    (trace (recv (enc y1 y2 (pubk a)))+      (send (enc "okay" y3 y1 (pubk a))))))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 x3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3-0)+  (traces+    ((send (enc x3-0 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3-0 x3 (pubk a))))+      (recv (enc "okay" x3-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0)))+      (send (enc "okay" x3 x1 (pubk a-0)))))+  (label 12)+  (seen 13)+  (unrealized (0 2))+  (origs (x3-0 (0 0)))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 2 0 init 2) x3-0 (0 2)+    (enc x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0)))+      (send (enc "okay" x3 x1 (pubk a-0)))))+  (label 13)+  (parent 12)+  (unrealized (1 0))+  (origs (x3 (0 0)))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 text) (a name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 2 1 resp 2) x3-0 (0 2)+    (enc x3-0 (pubk a-0)) (enc x3-0 x3 (pubk a-0)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))+  (label 14)+  (parent 12)+  (seen 17)+  (unrealized (0 2))+  (origs (x1 (0 0)))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3-0)+  (operation nonce-test (added-strand resp 2) x3-0 (0 2)+    (enc x3-0 (pubk a)) (enc x3-0 x3 (pubk a)))+  (traces+    ((send (enc x3-0 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3-0 x3 (pubk a))))+      (recv (enc "okay" x3-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3-0 x3 (pubk a)))+      (send (enc "okay" y3 x3-0 (pubk a)))))+  (label 15)+  (parent 12)+  (unrealized (0 2) (2 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a)))))+  (label 16)+  (parent 13)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 x1) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+  (origs (x3 (0 0))))++(defskeleton wonthull3+  (vars (x3 x1 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 17)+  (parent 13)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 x3) (x3 x3) (a a) (x1-0 x1) (x3-0 x3) (a-0 a))))+  (origs (x3 (0 0))))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))+    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 18)+  (parent 13)+  (seen 25)+  (unrealized (1 0) (2 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (2 0)) ((0 1) (1 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (added-strand resp 2) x1 (0 2) (enc x1 (pubk a))+    (enc "okay" x3 x1 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 19)+  (parent 14)+  (unrealized (0 2) (2 0))+  (comment "4 in cohort - 4 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x1-0) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1-0)+  (operation nonce-test (displaced 3 0 init 2) x3-0 (2 0)+    (enc x3-0 (pubk a)))+  (traces+    ((send (enc x1-0 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x1-0 x3 (pubk a))))+      (recv (enc "okay" x1-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x1-0 x3 (pubk a)))+      (send (enc "okay" y3 x1-0 (pubk a)))))+  (label 20)+  (parent 15)+  (seen 26 31)+  (unrealized (0 2))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 2) x3-0 (2 0)+    (enc x3-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 21)+  (parent 15)+  (seen 25 27)+  (unrealized (1 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 x3-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3-0) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3-0)+  (operation nonce-test (displaced 3 0 init 2) x3-0 (2 0)+    (enc x3-0 (pubk a)))+  (traces+    ((send (enc x3-0 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3-0 x3 (pubk a))))+      (recv (enc "okay" x3-0 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3-0 x3 (pubk a)))+      (send (enc "okay" y3 x3-0 (pubk a)))))+  (label 22)+  (parent 15)+  (seen 21 28)+  (unrealized (0 2))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 1 resp 2) x3-0 (2 0)+    (enc x3-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 23)+  (parent 15)+  (seen 29)+  (unrealized (1 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1-0)+  (operation nonce-test (displaced 3 0 init 2) x3 (2 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x1-0 (pubk a)))+      (send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+      (recv (enc "okay" x1-0 x1 (pubk a))))+    ((recv (enc x1 x1-0 (pubk a-0)))+      (send (enc "okay" x1-0 x1 (pubk a-0))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3 x1-0 (pubk a)))))+  (label 24)+  (parent 18)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 2) x3 (2 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 25)+  (parent 18)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 3 0 init 2) x1-0 (2 0)+    (enc x1-0 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 26)+  (parent 19)+  (seen 41 42)+  (unrealized (0 2))+  (comment "5 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 2) x1-0 (2 0)+    (enc x1-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 27)+  (parent 19)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 text) (a name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (displaced 3 0 init 2) x1 (2 0)+    (enc x1 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x1 x3 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 28)+  (parent 19)+  (seen 27 43)+  (unrealized (0 2))+  (comment "5 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 1 resp 2) x1-0 (2 0)+    (enc x1-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 29)+  (parent 19)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (x1-0 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 30)+  (parent 20)+  (seen 41 44)+  (unrealized (1 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 2) x1-0 (0 2)+    (enc x1-0 (pubk a)) (enc "okay" y3 x1-0 (pubk a))+    (enc x1-0 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 31)+  (parent 20)+  (seen 24 42)+  (unrealized (1 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 32)+  (parent 21)+  (seen 16)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))+    ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))+    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 33)+  (parent 21)+  (seen 25)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 34)+  (parent 21)+  (unrealized (1 0))+  (comment "3 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (x3-0 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 35)+  (parent 22)+  (seen 43 54)+  (unrealized (1 0))+  (comment "5 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 36)+  (parent 23)+  (seen 16)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((1 1) (2 0)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))+    (enc x3 x3 (pubk a)) (enc x1-0 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 37)+  (parent 23)+  (seen 57)+  (unrealized (1 0) (3 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+    (enc x1 (pubk a)) (enc "okay" y3 x1 (pubk a)) (enc x1 x1 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a)))))+  (label 38)+  (parent 24)+  (unrealized)+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 39)+  (parent 25)+  (seen 16)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc "okay" y3 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 40)+  (parent 25)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 text) (a name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3)) y3 (0 2) (enc y3 (pubk a))+    (enc "okay" x3 y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 41)+  (parent 26)+  (seen 43)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 text) (a name))+  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1 x3)) x3 (0 2) (enc x3 (pubk a))+    (enc "okay" x3 x3 (pubk a)) (enc "okay" y3 x3 (pubk a))+    (enc x3 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 42)+  (parent 26)+  (seen 58)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3)) y3 (0 2)+    (enc y3 (pubk a)) (enc "okay" x3 y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 43)+  (parent 28)+  (unrealized)+  (shape)+  (maps ((0 1) ((x1 y3) (x3 x3) (a a) (x1-0 x1) (x3-0 y3) (a-0 a))))+  (origs (y3 (0 0))))++(defskeleton wonthull3+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+    (enc y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 44)+  (parent 30)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))+    ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 45)+  (parent 30)+  (seen 61)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))+    ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))+    (enc x3 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 46)+  (parent 31)+  (seen 24)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 47)+  (parent 31)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1-0)+  (operation nonce-test (displaced 4 0 init 2) x3 (3 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x1-0 (pubk a)))+      (send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+      (recv (enc "okay" x1-0 x1 (pubk a))))+    ((recv (enc x1 x1-0 (pubk a-0)))+      (send (enc "okay" x1-0 x1 (pubk a-0))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3 x1-0 (pubk a))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3-0 x1-0 (pubk a)))))+  (label 48)+  (parent 33)+  (seen 38)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) x3 (3 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 49)+  (parent 33)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 50)+  (parent 34)+  (seen 17)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 51)+  (parent 34)+  (seen 16)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc x1-0 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 52)+  (parent 34)+  (seen 49 67 70)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 0 init 2) y3 (1 0)+    (enc y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 53)+  (parent 35)+  (seen 17 71)+  (unrealized (1 0))+  (comment "7 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 3 2 resp 2) y3 (1 0)+    (enc y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 54)+  (parent 35)+  (seen 71)+  (unrealized (1 0))+  (comment "3 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))+    ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 55)+  (parent 35)+  (seen 61)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 3 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x1-0) (x3 x1-0) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1-0) (y3 x1-0) (a a-0))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1-0) (y2 x1-0) (y3 y3-0) (a a))+  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1-0)+  (operation nonce-test (displaced 4 0 init 2) x3 (3 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x1-0 (pubk a)))+      (send (cat (enc x1-0 x1-0 (pubk a)) (enc x1-0 x1-0 (pubk a))))+      (recv (enc "okay" x1-0 x1 (pubk a))))+    ((recv (enc x1 x1-0 (pubk a-0)))+      (send (enc "okay" x1-0 x1 (pubk a-0))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3 x1-0 (pubk a))))+    ((recv (enc x1-0 x1-0 (pubk a)))+      (send (enc "okay" y3-0 x1-0 (pubk a)))))+  (label 56)+  (parent 37)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x3 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 0 init 2) x3 (3 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1-0 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a-0))) (send (enc "okay" x3 x1 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 57)+  (parent 37)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x1 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+  (precedes ((0 1) (1 0)) ((1 1) (0 2)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation generalization deleted (2 0))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a)))))+  (label 58)+  (parent 38)+  (seen 17)+  (unrealized)+  (origs (x1 (0 0)))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 text) (a name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 59)+  (parent 44)+  (seen 41)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 60)+  (parent 44)+  (seen 63 81)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 0 init 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 61)+  (parent 45)+  (seen 81)+  (unrealized (1 0))+  (comment "3 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 0 init 2) y3-0 (3 0)+    (enc y3-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 62)+  (parent 45)+  (seen 38 82)+  (unrealized (1 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 63)+  (parent 45)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) x3 (3 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 64)+  (parent 46)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (y3 text) (a name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 65)+  (parent 47)+  (seen 58)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 66)+  (parent 47)+  (seen 64 67)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) x1-0 (1 0)+    (enc x1-0 (pubk a)) (enc "okay" y3-0 x1-0 (pubk a))+    (enc x1-0 x1-0 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 67)+  (parent 48)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 68)+  (parent 49)+  (seen 40)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 69)+  (parent 49)+  (seen 39)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 x1-0 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1-0) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 0 init 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1-0 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a-0))) (send (enc "okay" y3 x1 (pubk a-0))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 70)+  (parent 52)+  (unrealized (1 0))+  (comment "2 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 3 2 resp 2) x3 (1 0)+    (enc x3 (pubk a)) (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a)))))+  (label 71)+  (parent 53)+  (seen 50)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (0 2))+    ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))+    (enc x3 x3 (pubk a)) (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 72)+  (parent 53)+  (seen 62 75)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a)))))+  (label 73)+  (parent 54)+  (seen 43)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (added-strand resp 2) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 74)+  (parent 54)+  (seen 77 81)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 2 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 0 init 2) y3-0 (3 0)+    (enc y3-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 75)+  (parent 55)+  (seen 40 91)+  (unrealized (1 0))+  (comment "3 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 0 init 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 76)+  (parent 55)+  (seen 75 92)+  (unrealized (1 0))+  (comment "4 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 2 resp 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 77)+  (parent 55)+  (seen 90)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x1) (x3 x1) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3) (a a))+  (defstrand resp 2 (y1 x1) (y2 x1) (y3 y3-0) (a a))+  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x1)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x1 (1 0)+    (enc x1 (pubk a)) (enc "okay" y3-0 x1 (pubk a))+    (enc x1 x1 (pubk a)))+  (traces+    ((send (enc x1 (pubk a)))+      (send (cat (enc x1 x1 (pubk a)) (enc x1 x1 (pubk a))))+      (recv (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" x1 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 x1 (pubk a))) (send (enc "okay" y3-0 x1 (pubk a)))))+  (label 78)+  (parent 56)+  (seen 38)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x1 x3 (pubk a))) (send (enc "okay" x3 x1 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 79)+  (parent 57)+  (seen 39)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (3 0)) ((1 1) (2 0)) ((2 1) (0 2)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (contracted (x1-0 x3) (a-0 a)) x3 (1 0)+    (enc x3 (pubk a)) (enc "okay" y3-0 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3-0 x3 (pubk a)))))+  (label 80)+  (parent 57)+  (seen 40)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 0 init 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 81)+  (parent 60)+  (unrealized (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x3) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 0 init 2) y3-0 (3 0)+    (enc y3-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x3 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 82)+  (parent 60)+  (seen 86)+  (unrealized (1 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 83)+  (parent 61)+  (seen 41)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 84)+  (parent 63)+  (seen 59)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (y3 y3-0 text) (a name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 85)+  (parent 64)+  (seen 38)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (y3 y3-0 text) (a name))+  (defstrand init 3 (x1 y3) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1 y3) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 86)+  (parent 67)+  (seen 38)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 y3) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 87)+  (parent 70)+  (seen 40)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 y3) (x3 y3) (x4 x1) (a a))+  (defstrand resp 2 (y1 x1) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 y3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (x1-0 x1) (a-0 a)) y3 (1 0)+    (enc y3 (pubk a)) (enc "okay" y3 y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc x1 y3 (pubk a))+    (enc y3 y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 y3 (pubk a)) (enc y3 y3 (pubk a))))+      (recv (enc "okay" y3 x1 (pubk a))))+    ((recv (enc x1 y3 (pubk a))) (send (enc "okay" y3 x1 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 y3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 88)+  (parent 70)+  (seen 39)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 0) (3 0)) ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (added-strand resp 2) x3 (1 0) (enc x3 (pubk a))+    (enc "okay" x3 x3 (pubk a)) (enc x3 x3 (pubk a))+    (enc x1 x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 89)+  (parent 71)+  (seen 82 90 91)+  (unrealized (1 0) (3 0))+  (comment "4 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 2 resp 2) x3 (3 0)+    (enc x3 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 90)+  (parent 72)+  (seen 68)+  (unrealized (1 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 x3) (x4 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 x3) (y2 x3) (y3 y3) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig x3)+  (operation nonce-test (displaced 4 0 init 2) y3-0 (3 0)+    (enc y3-0 (pubk a)))+  (traces+    ((send (enc x3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc x3 x3 (pubk a))))+      (recv (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a-0))) (send (enc "okay" x3 x3 (pubk a-0))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" x3 x3 (pubk a))))+    ((recv (enc x3 x3 (pubk a))) (send (enc "okay" y3 x3 (pubk a)))))+  (label 91)+  (parent 74)+  (seen 87)+  (unrealized (1 0))+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a a-0 name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a-0))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (displaced 4 0 init 2) y3 (3 0)+    (enc y3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a-0))) (send (enc "okay" x3 y3 (pubk a-0))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 92)+  (parent 74)+  (seen 91)+  (unrealized (1 0))+  (comment "2 in cohort - 1 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (0 2))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3-0 y3 (pubk a)) (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 93)+  (parent 76)+  (seen 43)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((1 1) (0 2)) ((2 1) (3 0)) ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 94)+  (parent 77)+  (seen 73)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 y3) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc y3 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 95)+  (parent 81)+  (seen 59)+  (unrealized)+  (comment "1 in cohort - 0 not yet seen"))++(defskeleton wonthull3+  (vars (x3 x1 y3 y3-0 text) (a name))+  (defstrand init 3 (x1 x1) (x2 x3) (x3 y3) (x4 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 x3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3) (a a))+  (defstrand resp 2 (y1 y3) (y2 x3) (y3 y3-0) (a a))+  (precedes ((0 1) (2 0)) ((0 1) (3 0)) ((1 1) (0 2)) ((2 1) (1 0))+    ((3 1) (1 0)))+  (non-orig (privk a))+  (uniq-orig y3)+  (operation nonce-test (contracted (a-0 a)) y3 (1 0) (enc y3 (pubk a))+    (enc "okay" y3 y3 (pubk a)) (enc "okay" y3-0 y3 (pubk a))+    (enc y3 x3 (pubk a)))+  (traces+    ((send (enc y3 (pubk a)))+      (send (cat (enc x1 x3 (pubk a)) (enc y3 x3 (pubk a))))+      (recv (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" x3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3 y3 (pubk a))))+    ((recv (enc y3 x3 (pubk a))) (send (enc "okay" y3-0 y3 (pubk a)))))+  (label 96)+  (parent 92)+  (seen 73)   (unrealized)   (comment "1 in cohort - 0 not yet seen"))
tst/woolam.tst view
@@ -1,6 +1,6 @@ (herald "Woo-Lam Protocol") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol woolam basic@@ -72,9 +72,8 @@       (send (enc a n (ltk b s)))))   (label 2)   (parent 1)-  (seen 3)   (unrealized (2 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton woolam   (vars (n text) (a s b name))@@ -84,7 +83,7 @@   (precedes ((0 1) (1 1)) ((0 3) (2 0)) ((1 2) (0 2)) ((2 1) (0 4)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig n)-  (operation encryption-test (added-strand resp 4)+  (operation encryption-test (displaced 3 0 resp 4)     (enc a (enc n (ltk a s)) (ltk b s)) (2 0))   (traces     ((recv a) (send n) (recv (enc n (ltk a s)))
tst/yahalom-6.3.6.tst view
@@ -4,7 +4,7 @@     "Yahalom Protocol, Section 6.3.6, Page 49")   (url "http://www.eecs.umich.edu/acal/swerve/docs/49-1.pdf")) -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol yahalom basic@@ -138,42 +138,42 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom-  (vars (n-a n-b n-a-0 n-b-0 text) (a b s name) (k skey))+  (vars (n-a n-b text) (a b s name) (k skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (deflistener k)-  (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))-  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))-  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))+  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))+  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig n-a n-b k)-  (operation encryption-test (added-strand resp 2)+  (operation encryption-test (displaced 3 0 resp 2)     (enc a n-a-0 n-b-0 (ltk b s)) (2 0))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))       (recv (cat (enc a k (ltk b s)) (enc n-b k)))) ((recv k) (send k))-    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))-      (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s))))))+    ((recv (cat b (enc a n-a n-b (ltk b s))))+      (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s))))))   (label 5)   (parent 4)   (unrealized (0 2) (1 0))   (comment "empty cohort"))  (defskeleton yahalom-  (vars (n-a n-b text) (a b s name) (k skey))+  (vars (n-a n-b n-a-0 n-b-0 text) (a b s name) (k skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (deflistener k)-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (precedes ((0 1) (2 0)) ((2 1) (0 2)) ((2 1) (1 0)))+  (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))+  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))+  (precedes ((2 1) (0 2)) ((2 1) (1 0)) ((3 1) (2 0)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig n-a n-b k)-  (operation encryption-test (displaced 3 0 resp 2)+  (operation encryption-test (added-strand resp 2)     (enc a n-a-0 n-b-0 (ltk b s)) (2 0))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))       (recv (cat (enc a k (ltk b s)) (enc n-b k)))) ((recv k) (send k))-    ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s))))))+    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))+      (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s))))))   (label 6)   (parent 4)   (unrealized (0 2) (1 0))@@ -232,27 +232,6 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom-  (vars (n-a n-b n-a-0 n-b-0 text) (a b s name) (k skey))-  (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))-  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))-  (precedes ((1 1) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a s) (ltk b s))-  (uniq-orig n-a n-b k)-  (operation encryption-test (added-strand resp 2)-    (enc a n-a-0 n-b-0 (ltk b s)) (1 0))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))-      (recv (cat (enc a k (ltk b s)) (enc n-b k))))-    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))-      (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s))))))-  (label 9)-  (parent 8)-  (unrealized (0 2))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton yahalom   (vars (n-a n-b text) (a b s name) (k skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))@@ -266,59 +245,31 @@       (recv (cat (enc a k (ltk b s)) (enc n-b k))))     ((recv (cat b (enc a n-a n-b (ltk b s))))       (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s))))))-  (label 10)+  (label 9)   (parent 8)   (unrealized (0 2))   (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom-  (vars (blob mesg) (n-a n-b n-a-0 n-b-0 n-a-1 text)-    (a b s a-0 b-0 s-0 name) (k skey))-  (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))-  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))-  (defstrand init 3 (blob blob) (n-a n-a-1) (n-b n-b) (a a-0) (b b-0)-    (s s-0) (k k))-  (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2)))-  (non-orig (ltk a s) (ltk b s))-  (uniq-orig n-a n-b k)-  (operation encryption-test (added-strand init 3) (enc n-b k) (0 2))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))-      (recv (cat (enc a k (ltk b s)) (enc n-b k))))-    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))-      (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s)))))-    ((send (cat a-0 n-a-1))-      (recv (cat (enc b-0 k n-a-1 n-b (ltk a-0 s-0)) blob))-      (send (cat blob (enc n-b k)))))-  (label 11)-  (parent 9)-  (seen 13)-  (unrealized (3 1))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton yahalom   (vars (n-a n-b n-a-0 n-b-0 text) (a b s name) (k skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))   (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))-  (deflistener k)-  (precedes ((1 1) (3 0)) ((2 1) (1 0)) ((3 1) (0 2)))+  (precedes ((1 1) (0 2)) ((2 1) (1 0)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig n-a n-b k)-  (operation encryption-test (added-listener k) (enc n-b k) (0 2))+  (operation encryption-test (added-strand resp 2)+    (enc a n-a-0 n-b-0 (ltk b s)) (1 0))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))       (recv (cat (enc a k (ltk b s)) (enc n-b k))))     ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))       (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s)))))-    ((recv k) (send k)))-  (label 12)-  (parent 9)-  (unrealized (0 2) (3 0))-  (comment "empty cohort"))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s))))))+  (label 10)+  (parent 8)+  (unrealized (0 2))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom   (vars (blob mesg) (n-a n-b n-a-0 text) (a b s a-0 b-0 s-0 name)@@ -339,8 +290,8 @@     ((send (cat a-0 n-a-0))       (recv (cat (enc b-0 k n-a-0 n-b (ltk a-0 s-0)) blob))       (send (cat blob (enc n-b k)))))-  (label 13)-  (parent 10)+  (label 11)+  (parent 9)   (unrealized (2 1))   (comment "2 in cohort - 2 not yet seen")) @@ -359,26 +310,23 @@     ((recv (cat b (enc a n-a n-b (ltk b s))))       (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))     ((recv k) (send k)))-  (label 14)-  (parent 10)+  (label 12)+  (parent 9)   (unrealized (0 2) (2 0))   (comment "empty cohort"))  (defskeleton yahalom   (vars (blob mesg) (n-a n-b n-a-0 n-b-0 n-a-1 text)-    (a b s a-0 b-0 s-0 name) (k k-0 skey))+    (a b s a-0 b-0 s-0 name) (k skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))   (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))   (defstrand init 3 (blob blob) (n-a n-a-1) (n-b n-b) (a a-0) (b b-0)     (s s-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k-0))-  (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2))-    ((4 1) (3 1)))+  (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2)))   (non-orig (ltk a s) (ltk b s))-  (uniq-orig n-a n-b k k-0)-  (operation nonce-test (added-strand serv 2) n-b (3 1)-    (enc a n-a n-b (ltk b s)))+  (uniq-orig n-a n-b k)+  (operation encryption-test (added-strand init 3) (enc n-b k) (0 2))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))       (recv (cat (enc a k (ltk b s)) (enc n-b k))))@@ -387,16 +335,35 @@     ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s)))))     ((send (cat a-0 n-a-1))       (recv (cat (enc b-0 k n-a-1 n-b (ltk a-0 s-0)) blob))-      (send (cat blob (enc n-b k))))-    ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k-0 n-a n-b (ltk a s)) (enc a k-0 (ltk b s))))))-  (label 15)-  (parent 11)-  (seen 16 19)+      (send (cat blob (enc n-b k)))))+  (label 13)+  (parent 10)   (unrealized (3 1))-  (comment "4 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom+  (vars (n-a n-b n-a-0 n-b-0 text) (a b s name) (k skey))+  (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))+  (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))+  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))+  (deflistener k)+  (precedes ((1 1) (3 0)) ((2 1) (1 0)) ((3 1) (0 2)))+  (non-orig (ltk a s) (ltk b s))+  (uniq-orig n-a n-b k)+  (operation encryption-test (added-listener k) (enc n-b k) (0 2))+  (traces+    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))+      (recv (cat (enc a k (ltk b s)) (enc n-b k))))+    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))+      (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s)))))+    ((recv k) (send k)))+  (label 14)+  (parent 10)+  (unrealized (0 2) (3 0))+  (comment "empty cohort"))++(defskeleton yahalom   (vars (blob mesg) (n-a n-b text) (a b s name) (k skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))@@ -414,8 +381,8 @@       (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))     ((send (cat a n-a)) (recv (cat (enc b k n-a n-b (ltk a s)) blob))       (send (cat blob (enc n-b k)))))-  (label 16)-  (parent 13)+  (label 15)+  (parent 11)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k))))@@ -446,13 +413,13 @@       (send (cat blob (enc n-b k))))     ((send (cat a n-a)) (recv (cat (enc b k n-a n-b (ltk a s)) blob-0))       (send (cat blob-0 (enc n-b k)))))-  (label 17)-  (parent 13)+  (label 16)+  (parent 11)   (unrealized (2 1))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom-  (vars (blob blob-0 mesg) (n-a n-b n-a-0 n-b-0 n-a-1 text)+  (vars (blob mesg) (n-a n-b n-a-0 n-b-0 n-a-1 text)     (a b s a-0 b-0 s-0 name) (k k-0 skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))   (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))@@ -460,14 +427,12 @@   (defstrand init 3 (blob blob) (n-a n-a-1) (n-b n-b) (a a-0) (b b-0)     (s s-0) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k-0))-  (defstrand init 3 (blob blob-0) (n-a n-a) (n-b n-b) (a a) (b b) (s s)-    (k k-0))   (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2))-    ((4 1) (5 1)) ((5 0) (0 0)) ((5 2) (3 1)))+    ((4 1) (3 1)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig n-a n-b k k-0)-  (operation nonce-test (added-strand init 3) n-b (3 1)-    (enc a n-a n-b (ltk b s)) (enc b k-0 n-a n-b (ltk a s)))+  (operation nonce-test (added-strand serv 2) n-b (3 1)+    (enc a n-a n-b (ltk b s)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))       (recv (cat (enc a k (ltk b s)) (enc n-b k))))@@ -478,45 +443,11 @@       (recv (cat (enc b-0 k n-a-1 n-b (ltk a-0 s-0)) blob))       (send (cat blob (enc n-b k))))     ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k-0 n-a n-b (ltk a s)) (enc a k-0 (ltk b s)))))-    ((send (cat a n-a))-      (recv (cat (enc b k-0 n-a n-b (ltk a s)) blob-0))-      (send (cat blob-0 (enc n-b k-0)))))-  (label 18)-  (parent 15)-  (seen 21)-  (unrealized (3 1))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton yahalom-  (vars (blob mesg) (n-a n-b n-a-0 text) (a b s a-0 b-0 s-0 name)-    (k k-0 skey))-  (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand init 3 (blob blob) (n-a n-a-0) (n-b n-b) (a a-0) (b b-0)-    (s s-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((2 2) (0 2))-    ((3 1) (2 1)))-  (non-orig (ltk a s) (ltk b s))-  (uniq-orig n-a n-b k k-0)-  (operation nonce-test (displaced 5 2 resp 2) n-b-0 (3 1)-    (enc a n-a n-b-0 (ltk b s)) (enc b k-0 n-a n-b-0 (ltk a s)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))-      (recv (cat (enc a k (ltk b s)) (enc n-b k))))-    ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))-    ((send (cat a-0 n-a-0))-      (recv (cat (enc b-0 k n-a-0 n-b (ltk a-0 s-0)) blob))-      (send (cat blob (enc n-b k))))-    ((recv (cat b (enc a n-a n-b (ltk b s))))       (send (cat (enc b k-0 n-a n-b (ltk a s)) (enc a k-0 (ltk b s))))))-  (label 19)-  (parent 15)-  (seen 16 17 21)-  (unrealized (2 1))-  (comment "3 in cohort - 0 not yet seen"))+  (label 17)+  (parent 13)+  (unrealized (3 1))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (blob blob-0 mesg) (n-a n-b n-a-0 text) (a b s a-0 b-0 s-0 name)@@ -544,44 +475,45 @@       (send (cat blob (enc n-b k))))     ((send (cat a n-a)) (recv (cat (enc b k n-a n-b (ltk a s)) blob-0))       (send (cat blob-0 (enc n-b k)))) ((recv k) (send k)))-  (label 20)-  (parent 17)+  (label 18)+  (parent 16)   (unrealized (4 0))   (comment "empty cohort"))  (defskeleton yahalom-  (vars (blob blob-0 mesg) (n-a n-b n-a-0 text) (a b s a-0 b-0 s-0 name)-    (k k-0 skey))+  (vars (blob blob-0 mesg) (n-a n-b n-a-0 n-b-0 n-a-1 text)+    (a b s a-0 b-0 s-0 name) (k k-0 skey))   (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand init 3 (blob blob) (n-a n-a-0) (n-b n-b) (a a-0) (b b-0)+  (defstrand serv 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s) (k k))+  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (a a) (b b) (s s))+  (defstrand init 3 (blob blob) (n-a n-a-1) (n-b n-b) (a a-0) (b b-0)     (s s-0) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k-0))   (defstrand init 3 (blob blob-0) (n-a n-a) (n-b n-b) (a a) (b b) (s s)     (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((2 2) (0 2))-    ((3 1) (4 1)) ((4 0) (0 0)) ((4 2) (2 1)))+  (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((2 1) (1 0)) ((3 2) (0 2))+    ((4 1) (5 1)) ((5 0) (0 0)) ((5 2) (3 1)))   (non-orig (ltk a s) (ltk b s))   (uniq-orig n-a n-b k k-0)-  (operation nonce-test (displaced 6 2 resp 2) n-b-0 (3 1)-    (enc n-b-0 k-0) (enc a n-a n-b-0 (ltk b s))-    (enc b k-0 n-a n-b-0 (ltk a s)))+  (operation nonce-test (added-strand init 3) n-b (3 1)+    (enc a n-a n-b (ltk b s)) (enc b k-0 n-a n-b (ltk a s)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))       (recv (cat (enc a k (ltk b s)) (enc n-b k))))-    ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))-    ((send (cat a-0 n-a-0))-      (recv (cat (enc b-0 k n-a-0 n-b (ltk a-0 s-0)) blob))+    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b s))))+      (send (cat (enc b k n-a-0 n-b-0 (ltk a s)) (enc a k (ltk b s)))))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b s)))))+    ((send (cat a-0 n-a-1))+      (recv (cat (enc b-0 k n-a-1 n-b (ltk a-0 s-0)) blob))       (send (cat blob (enc n-b k))))     ((recv (cat b (enc a n-a n-b (ltk b s))))       (send (cat (enc b k-0 n-a n-b (ltk a s)) (enc a k-0 (ltk b s)))))     ((send (cat a n-a))       (recv (cat (enc b k-0 n-a n-b (ltk a s)) blob-0))       (send (cat blob-0 (enc n-b k-0)))))-  (label 21)-  (parent 18)-  (unrealized (2 1))+  (label 19)+  (parent 17)+  (unrealized (3 1))   (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom@@ -617,48 +549,11 @@     ((send (cat a n-a))       (recv (cat (enc b k-0 n-a n-b (ltk a s)) blob-0))       (send (cat blob-0 (enc n-b k-0)))) ((recv k-0) (send k-0)))-  (label 22)-  (parent 18)+  (label 20)+  (parent 19)   (unrealized (3 1) (6 0))   (comment "empty cohort")) -(defskeleton yahalom-  (vars (blob blob-0 mesg) (n-a n-b n-a-0 text) (a b s a-0 b-0 s-0 name)-    (k k-0 skey))-  (defstrand resp 3 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k))-  (defstrand init 3 (blob blob) (n-a n-a-0) (n-b n-b) (a a-0) (b b-0)-    (s s-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (a a) (b b) (s s) (k k-0))-  (defstrand init 3 (blob blob-0) (n-a n-a) (n-b n-b) (a a) (b b) (s s)-    (k k-0))-  (deflistener k-0)-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((2 2) (0 2))-    ((3 1) (4 1)) ((3 1) (5 0)) ((4 0) (0 0)) ((4 2) (2 1))-    ((5 1) (2 1)))-  (non-orig (ltk a s) (ltk b s))-  (uniq-orig n-a n-b k k-0)-  (operation nonce-test (added-listener k-0) n-b (2 1) (enc n-b k-0)-    (enc a n-a n-b (ltk b s)) (enc b k n-a n-b (ltk a s))-    (enc b k-0 n-a n-b (ltk a s)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))-      (recv (cat (enc a k (ltk b s)) (enc n-b k))))-    ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))-    ((send (cat a-0 n-a-0))-      (recv (cat (enc b-0 k n-a-0 n-b (ltk a-0 s-0)) blob))-      (send (cat blob (enc n-b k))))-    ((recv (cat b (enc a n-a n-b (ltk b s))))-      (send (cat (enc b k-0 n-a n-b (ltk a s)) (enc a k-0 (ltk b s)))))-    ((send (cat a n-a))-      (recv (cat (enc b k-0 n-a n-b (ltk a s)) blob-0))-      (send (cat blob-0 (enc n-b k-0)))) ((recv k-0) (send k-0)))-  (label 23)-  (parent 21)-  (unrealized (2 1) (5 0))-  (comment "empty cohort"))- (comment "Nothing left to do")  (defprotocol yahalom basic@@ -687,7 +582,7 @@   (traces     ((recv (cat b (enc a n-a n-b (ltk b s))))       (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s))))))-  (label 24)+  (label 21)   (unrealized (0 0))   (origs (k (0 1)))   (comment "1 in cohort - 1 not yet seen"))@@ -705,8 +600,8 @@     ((recv (cat b (enc a n-a n-b (ltk b s))))       (send (cat (enc b k n-a n-b (ltk a s)) (enc a k (ltk b s)))))     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b s))))))-  (label 25)-  (parent 24)+  (label 22)+  (parent 21)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (s s) (n-a n-a) (n-b n-b) (k k))))
tst/yahalom.tst view
@@ -1,6 +1,6 @@ (herald "Yahalom Protocol Without Forwarding") -(comment "CPSA 2.2.8")+(comment "CPSA 2.2.9") (comment "All input read")  (defprotocol yahalom basic@@ -52,27 +52,6 @@   (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom-  (vars (n-b n-a n-a-0 n-b-0 text) (a b c name) (k skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))-  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))-  (precedes ((1 2) (0 2)) ((2 1) (1 0)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k)-  (operation encryption-test (added-strand resp 2)-    (enc a n-a-0 n-b-0 (ltk b c)) (1 0))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))-      (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))-  (label 2)-  (parent 1)-  (unrealized (0 3))-  (comment "2 in cohort - 2 not yet seen"))--(defskeleton yahalom   (vars (n-b n-a text) (a b c name) (k skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))   (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))@@ -86,59 +65,31 @@       (recv (enc a k (ltk b c))) (recv (enc n-b k)))     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))-  (label 3)+  (label 2)   (parent 1)   (unrealized (0 3))   (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom-  (vars (n-b n-a n-a-0 n-b-0 n-a-1 text) (a b c a-0 b-0 c-0 name)-    (k skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))-  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))-  (defstrand init 3 (n-a n-a-1) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((1 2) (0 2)) ((2 1) (1 0))-    ((3 2) (0 3)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k)-  (operation encryption-test (added-strand init 3) (enc n-b k) (0 3))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))-      (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c)))))-    ((send (cat a-0 n-a-1)) (recv (enc b-0 k n-a-1 n-b (ltk a-0 c-0)))-      (send (enc n-b k))))-  (label 4)-  (parent 2)-  (seen 6)-  (unrealized (3 1))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 text) (a b c name) (k skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))   (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))   (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))-  (deflistener k)-  (precedes ((1 1) (3 0)) ((1 2) (0 2)) ((2 1) (1 0)) ((3 1) (0 3)))+  (precedes ((1 2) (0 2)) ((2 1) (1 0)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k)-  (operation encryption-test (added-listener k) (enc n-b k) (0 3))+  (operation encryption-test (added-strand resp 2)+    (enc a n-a-0 n-b-0 (ltk b c)) (1 0))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))     ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))       (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))-    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c)))))-    ((recv k) (send k)))-  (label 5)-  (parent 2)-  (seen 9)-  (unrealized (0 3) (3 0))-  (comment "2 in cohort - 1 not yet seen"))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))+  (label 3)+  (parent 1)+  (unrealized (0 3))+  (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 text) (a b c a-0 b-0 c-0 name) (k skey))@@ -156,8 +107,8 @@       (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))     ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))       (send (enc n-b k))))-  (label 6)-  (parent 3)+  (label 4)+  (parent 2)   (unrealized (2 1))   (comment "2 in cohort - 2 not yet seen")) @@ -176,26 +127,23 @@     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))     ((recv k) (send k)))-  (label 7)-  (parent 3)-  (seen 12)+  (label 5)+  (parent 2)   (unrealized (0 3) (2 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 n-a-1 text) (a b c a-0 b-0 c-0 name)-    (k k-0 skey))+    (k skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))   (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))   (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))   (defstrand init 3 (n-a n-a-1) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((1 2) (0 2)) ((2 1) (1 0))-    ((3 2) (0 3)) ((4 1) (3 1)))+  (precedes ((0 1) (3 1)) ((1 1) (3 1)) ((1 2) (0 2)) ((2 1) (1 0))+    ((3 2) (0 3)))   (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand serv 2) n-b (3 1)-    (enc a n-a n-b (ltk b c)))+  (uniq-orig n-b k)+  (operation encryption-test (added-strand init 3) (enc n-b k) (0 3))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))@@ -203,14 +151,11 @@       (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))     ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c)))))     ((send (cat a-0 n-a-1)) (recv (enc b-0 k n-a-1 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c)))))-  (label 8)-  (parent 4)-  (seen 10 14)+      (send (enc n-b k))))+  (label 6)+  (parent 3)   (unrealized (3 1))-  (comment "4 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 text) (a b c name) (k skey))@@ -218,11 +163,10 @@   (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))   (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))   (deflistener k)-  (precedes ((1 2) (0 2)) ((1 2) (3 0)) ((2 1) (1 0)) ((3 1) (0 3)))+  (precedes ((1 1) (3 0)) ((1 2) (0 2)) ((2 1) (1 0)) ((3 1) (0 3)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k)-  (operation nonce-test (added-strand serv 3) k (3 0)-    (enc b k n-a-0 n-b-0 (ltk a c)))+  (operation encryption-test (added-listener k) (enc n-b k) (0 3))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))@@ -230,10 +174,10 @@       (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))     ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c)))))     ((recv k) (send k)))-  (label 9)-  (parent 5)+  (label 7)+  (parent 3)   (unrealized (0 3) (3 0))-  (comment "empty cohort"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a text) (a b c name) (k skey))@@ -252,8 +196,8 @@       (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))     ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))       (send (enc n-b k))))-  (label 10)-  (parent 6)+  (label 8)+  (parent 4)   (unrealized)   (shape)   (maps ((0) ((a a) (b b) (c c) (n-b n-b) (n-a n-a) (k k))))@@ -280,8 +224,8 @@       (send (enc n-b k)))     ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))       (send (enc n-b k))))-  (label 11)-  (parent 6)+  (label 9)+  (parent 4)   (unrealized (2 1))   (comment "2 in cohort - 2 not yet seen")) @@ -293,7 +237,7 @@   (precedes ((0 1) (1 0)) ((1 2) (0 2)) ((1 2) (2 0)) ((2 1) (0 3)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k)-  (operation nonce-test (added-strand serv 3) k (2 0)+  (operation nonce-test (displaced 3 1 serv 3) k (2 0)     (enc b k n-a n-b (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))@@ -301,8 +245,8 @@     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))     ((recv k) (send k)))-  (label 12)-  (parent 7)+  (label 10)+  (parent 5)   (unrealized (0 3) (2 0))   (comment "empty cohort")) @@ -314,13 +258,12 @@   (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))   (defstrand init 3 (n-a n-a-1) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))   (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((1 2) (0 2)) ((2 1) (1 0))-    ((3 2) (0 3)) ((4 1) (5 1)) ((5 2) (3 1)))+    ((3 2) (0 3)) ((4 1) (3 1)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand init 3) n-b (3 1)-    (enc a n-a n-b (ltk b c)) (enc b k-0 n-a n-b (ltk a c)))+  (operation nonce-test (added-strand serv 2) n-b (3 1)+    (enc a n-a n-b (ltk b c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))@@ -330,41 +273,34 @@     ((send (cat a-0 n-a-1)) (recv (enc b-0 k n-a-1 n-b (ltk a-0 c-0)))       (send (enc n-b k)))     ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0))))-  (label 13)-  (parent 8)-  (seen 15 17)+      (send (enc b k-0 n-a n-b (ltk a c)))))+  (label 11)+  (parent 6)   (unrealized (3 1))-  (comment "4 in cohort - 2 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))+  (vars (n-b n-a n-a-0 n-b-0 text) (a b c name) (k skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (2 1)))+  (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))+  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))+  (deflistener k)+  (precedes ((1 2) (0 2)) ((1 2) (3 0)) ((2 1) (1 0)) ((3 1) (0 3)))   (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (displaced 5 2 resp 2) n-b-0 (3 1)-    (enc a n-a n-b-0 (ltk b c)) (enc b k-0 n-a n-b-0 (ltk a c)))+  (uniq-orig n-b k)+  (operation nonce-test (displaced 4 1 serv 3) k (3 0)+    (enc b k n-a-0 n-b-0 (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c)))))-  (label 14)-  (parent 8)-  (seen 10 11 17)-  (unrealized (2 1))-  (comment "3 in cohort - 0 not yet seen"))+    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+      (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c)))))+    ((recv k) (send k)))+  (label 12)+  (parent 7)+  (unrealized (0 3) (3 0))+  (comment "empty cohort"))  (defskeleton yahalom   (vars (n-b n-a text) (a b c name) (k skey))@@ -388,9 +324,9 @@       (send (enc n-b k)))     ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))       (send (enc n-b k))))-  (label 15)-  (parent 11)-  (seen 10)+  (label 13)+  (parent 9)+  (seen 8)   (unrealized)   (comment "1 in cohort - 0 not yet seen")) @@ -416,41 +352,10 @@       (send (enc n-b k)))     ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))       (send (enc n-b k))) ((recv k) (send k)))-  (label 16)-  (parent 11)-  (seen 19)+  (label 14)+  (parent 9)   (unrealized (4 0))-  (comment "2 in cohort - 1 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (4 1)) ((4 2) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (displaced 6 2 resp 2) n-b-0 (3 1)-    (enc n-b-0 k-0) (enc a n-a n-b-0 (ltk b c))-    (enc b k-0 n-a n-b-0 (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0))))-  (label 17)-  (parent 13)-  (unrealized (2 1))-  (comment "3 in cohort - 3 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 n-a-1 text) (a b c a-0 b-0 c-0 name)@@ -461,13 +366,11 @@   (defstrand init 3 (n-a n-a-1) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))   (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (deflistener k-0)   (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((1 2) (0 2)) ((2 1) (1 0))-    ((3 2) (0 3)) ((4 1) (5 1)) ((4 1) (6 0)) ((5 2) (3 1))-    ((6 1) (3 1)))+    ((3 2) (0 3)) ((4 1) (5 1)) ((5 2) (3 1)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k k-0)-  (operation nonce-test (added-listener k-0) n-b (3 1) (enc n-b k-0)+  (operation nonce-test (added-strand init 3) n-b (3 1)     (enc a n-a n-b (ltk b c)) (enc b k-0 n-a n-b (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))@@ -480,12 +383,11 @@     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k-0 n-a n-b (ltk a c))))     ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0))) ((recv k-0) (send k-0)))-  (label 18)-  (parent 13)-  (seen 19 23)-  (unrealized (3 1) (6 0))-  (comment "3 in cohort - 1 not yet seen"))+      (send (enc n-b k-0))))+  (label 15)+  (parent 11)+  (unrealized (3 1))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 text) (a b c a-0 b-0 c-0 name) (k skey))@@ -498,7 +400,7 @@     ((2 2) (0 3)) ((3 2) (2 1)) ((4 1) (2 1)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k)-  (operation nonce-test (added-strand serv 3) k (4 0)+  (operation nonce-test (displaced 5 1 serv 3) k (4 0)     (enc b k n-a n-b (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))@@ -509,106 +411,44 @@       (send (enc n-b k)))     ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))       (send (enc n-b k))) ((recv k) (send k)))-  (label 19)-  (parent 16)+  (label 16)+  (parent 14)   (unrealized (4 0))   (comment "empty cohort"))  (defskeleton yahalom-  (vars (n-a n-b text) (a b c name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (4 1)) ((4 2) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (c-0 c) (n-a-0 n-a))-    n-b (2 1) (enc n-b k-0) (enc a n-a n-b (ltk b c))-    (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0))))-  (label 20)-  (parent 17)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (5 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (4 1)) ((4 2) (2 1)) ((5 2) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand init 3) n-b (2 1) (enc n-b k-0)-    (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c))-    (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))))-  (label 21)-  (parent 17)-  (unrealized (2 1))-  (comment "3 in cohort - 3 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))+  (vars (n-b n-a n-a-0 n-b-0 n-a-1 text) (a b c a-0 b-0 c-0 name)+    (k k-0 skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))+  (defstrand serv 3 (n-a n-a-0) (n-b n-b-0) (c c) (a a) (b b) (k k))+  (defstrand resp 2 (n-a n-a-0) (n-b n-b-0) (b b) (a a) (c c))+  (defstrand init 3 (n-a n-a-1) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))   (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))   (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))   (deflistener k-0)-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (4 1)) ((3 1) (5 0)) ((4 2) (2 1))-    ((5 1) (2 1)))+  (precedes ((0 1) (4 0)) ((1 1) (3 1)) ((1 2) (0 2)) ((2 1) (1 0))+    ((3 2) (0 3)) ((4 1) (5 1)) ((4 1) (6 0)) ((5 2) (3 1))+    ((6 1) (3 1)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k k-0)-  (operation nonce-test (added-listener k-0) n-b (2 1) (enc n-b k-0)-    (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c))-    (enc b k-0 n-a n-b (ltk a c)))+  (operation nonce-test (added-listener k-0) n-b (3 1) (enc n-b k-0)+    (enc a n-a n-b (ltk b c)) (enc b k-0 n-a n-b (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))+    ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))+      (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))+    ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c)))))+    ((send (cat a-0 n-a-1)) (recv (enc b-0 k n-a-1 n-b (ltk a-0 c-0)))       (send (enc n-b k)))     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k-0 n-a n-b (ltk a c))))     ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))       (send (enc n-b k-0))) ((recv k-0) (send k-0)))-  (label 22)-  (parent 17)-  (seen 19 28)-  (unrealized (2 1) (5 0))-  (comment "3 in cohort - 1 not yet seen"))+  (label 17)+  (parent 15)+  (unrealized (3 1) (6 0))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 n-a-1 text) (a b c a-0 b-0 c-0 name)@@ -625,7 +465,7 @@     ((6 2) (5 0)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand serv 3) k-0 (6 0)+  (operation nonce-test (displaced 4 7 serv 3) k-0 (6 0)     (enc b k-0 n-a n-b (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))@@ -640,328 +480,11 @@     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k-0 n-a n-b (ltk a c)))       (send (enc a k-0 (ltk b c)))))-  (label 23)-  (parent 18)+  (label 18)+  (parent 17)   (unrealized (3 1) (5 0))   (comment "empty cohort")) -(defskeleton yahalom-  (vars (n-a n-b text) (a b c name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (2 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation generalization deleted (4 0))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c)))))-  (label 24)-  (parent 20)-  (seen 10)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b text) (a b c name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (5 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (4 1)) ((4 2) (2 1)) ((5 2) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (contracted (a-0 a) (b-0 b) (c-0 c) (n-a-0 n-a))-    n-b (2 1) (enc n-b k) (enc n-b k-0) (enc a n-a n-b (ltk b c))-    (enc b k n-a n-b (ltk a c)) (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))))-  (label 25)-  (parent 21)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (deflistener k)-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (5 1)) ((1 1) (6 0))-    ((1 2) (0 2)) ((2 2) (0 3)) ((3 1) (4 1)) ((4 2) (2 1))-    ((5 2) (2 1)) ((6 1) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-listener k) n-b (2 1) (enc n-b k)-    (enc n-b k-0) (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c))-    (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))) ((recv k) (send k)))-  (label 26)-  (parent 21)-  (seen 30)-  (unrealized (6 0))-  (comment "3 in cohort - 2 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (deflistener k-0)-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (5 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 1) (4 1)) ((3 1) (6 0)) ((4 2) (2 1))-    ((5 2) (2 1)) ((6 1) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-listener k-0) n-b (2 1) (enc n-b k)-    (enc n-b k-0) (enc a n-a n-b (ltk b c)) (enc b k n-a n-b (ltk a c))-    (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))) ((recv k-0) (send k-0)))-  (label 27)-  (parent 21)-  (seen 31 32)-  (unrealized (2 1) (6 0))-  (comment "3 in cohort - 1 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (deflistener k-0)-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (5 0)) ((1 1) (2 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 2) (2 1)) ((4 1) (2 1)) ((5 1) (3 1))-    ((5 2) (4 0)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand serv 3) k-0 (5 0)-    (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0))) ((recv k-0) (send k-0))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c)))-      (send (enc a k-0 (ltk b c)))))-  (label 28)-  (parent 22)-  (unrealized (2 1) (4 0))-  (comment "empty cohort"))--(defskeleton yahalom-  (vars (n-a n-b text) (a b c name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (4 1)) ((1 2) (0 2))-    ((2 1) (3 1)) ((3 2) (0 3)) ((4 2) (0 3)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation generalization deleted (2 0))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))))-  (label 29)-  (parent 25)-  (unrealized)-  (comment "1 in cohort - 1 not yet seen"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (deflistener k)-  (precedes ((0 1) (1 0)) ((0 1) (3 0)) ((1 1) (5 1)) ((1 2) (0 2))-    ((1 2) (6 0)) ((2 2) (0 3)) ((3 1) (4 1)) ((4 2) (2 1))-    ((5 2) (2 1)) ((6 1) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand serv 3) k (6 0)-    (enc b k n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))) ((recv k) (send k)))-  (label 30)-  (parent 26)-  (unrealized (6 0))-  (comment "empty cohort"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (deflistener k)-  (precedes ((0 1) (1 0)) ((1 1) (3 1)) ((1 1) (4 1)) ((1 2) (0 2))-    ((1 2) (5 0)) ((2 2) (0 3)) ((3 2) (2 1)) ((4 2) (2 1))-    ((5 1) (2 1)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k)-  (operation nonce-test (displaced 3 7 serv 3) k (6 0)-    (enc b k n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))) ((recv k) (send k)))-  (label 31)-  (parent 26)-  (unrealized (5 0))-  (comment "empty cohort"))--(defskeleton yahalom-  (vars (n-a n-b n-a-0 text) (a b c a-0 b-0 c-0 name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand init 3 (n-a n-a-0) (n-b n-b) (a a-0) (b b-0) (c c-0) (k k))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (deflistener k-0)-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (precedes ((0 1) (1 0)) ((0 1) (6 0)) ((1 1) (4 1)) ((1 2) (0 2))-    ((2 2) (0 3)) ((3 2) (2 1)) ((4 2) (2 1)) ((5 1) (2 1))-    ((6 1) (3 1)) ((6 2) (5 0)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation nonce-test (added-strand serv 3) k-0 (6 0)-    (enc b k-0 n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((send (cat a-0 n-a-0)) (recv (enc b-0 k n-a-0 n-b (ltk a-0 c-0)))-      (send (enc n-b k)))-    ((send (cat a n-a)) (recv (enc b k-0 n-a n-b (ltk a c)))-      (send (enc n-b k-0)))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))) ((recv k-0) (send k-0))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c)))-      (send (enc a k-0 (ltk b c)))))-  (label 32)-  (parent 27)-  (unrealized (2 1) (5 0))-  (comment "empty cohort"))--(defskeleton yahalom-  (vars (n-a n-b text) (a b c name) (k k-0 skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (defstrand serv 2 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k-0))-  (defstrand init 3 (n-a n-a) (n-b n-b) (a a) (b b) (c c) (k k))-  (precedes ((0 1) (1 0)) ((0 1) (2 0)) ((1 1) (3 1)) ((1 2) (0 2))-    ((2 1) (0 3)) ((3 2) (0 3)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k k-0)-  (operation generalization deleted (3 0))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k)))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c))))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k-0 n-a n-b (ltk a c))))-    ((send (cat a n-a)) (recv (enc b k n-a n-b (ltk a c)))-      (send (enc n-b k))))-  (label 33)-  (parent 29)-  (seen 10)-  (unrealized)-  (comment "1 in cohort - 0 not yet seen"))- (comment "Nothing left to do")  (defprotocol yahalom basic@@ -989,7 +512,7 @@     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k)))     ((recv k) (send k)))-  (label 34)+  (label 19)   (unrealized (0 2) (0 3))   (origs (n-b (0 1)))   (comment "1 in cohort - 1 not yet seen"))@@ -1010,12 +533,32 @@     ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))       (send (enc b k n-a-0 n-b-0 (ltk a c)))       (send (enc a k (ltk b c)))))-  (label 35)-  (parent 34)+  (label 20)+  (parent 19)   (unrealized (0 3) (1 0) (2 0))   (comment "2 in cohort - 2 not yet seen"))  (defskeleton yahalom+  (vars (n-b n-a text) (a b c name) (k skey))+  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))+  (deflistener k)+  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))+  (precedes ((0 1) (2 0)) ((2 1) (1 0)) ((2 2) (0 2)))+  (non-orig (ltk a c) (ltk b c))+  (uniq-orig n-b k)+  (operation encryption-test (displaced 3 0 resp 2)+    (enc a n-a-0 n-b-0 (ltk b c)) (2 0))+  (traces+    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))+      (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))+    ((recv (cat b (enc a n-a n-b (ltk b c))))+      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))+  (label 21)+  (parent 20)+  (unrealized (0 3) (1 0))+  (comment "1 in cohort - 1 not yet seen"))++(defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 text) (a b c name) (k skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))   (deflistener k)@@ -1032,32 +575,30 @@     ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))       (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))     ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))-  (label 36)-  (parent 35)-  (seen 38)+  (label 22)+  (parent 20)   (unrealized (0 3) (1 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "1 in cohort - 1 not yet seen"))  (defskeleton yahalom   (vars (n-b n-a text) (a b c name) (k skey))   (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))   (deflistener k)   (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (precedes ((0 1) (2 0)) ((2 1) (1 0)) ((2 2) (0 2)))+  (precedes ((0 1) (2 0)) ((2 2) (0 2)) ((2 2) (1 0)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k)-  (operation encryption-test (displaced 3 0 resp 2)-    (enc a n-a-0 n-b-0 (ltk b c)) (2 0))+  (operation nonce-test (displaced 3 2 serv 3) k (1 0)+    (enc b k n-a n-b (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))       (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))     ((recv (cat b (enc a n-a n-b (ltk b c))))       (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))-  (label 37)-  (parent 35)-  (seen 39)+  (label 23)+  (parent 21)   (unrealized (0 3) (1 0))-  (comment "2 in cohort - 1 not yet seen"))+  (comment "empty cohort"))  (defskeleton yahalom   (vars (n-b n-a n-a-0 n-b-0 text) (a b c name) (k skey))@@ -1068,7 +609,7 @@   (precedes ((2 2) (0 2)) ((2 2) (1 0)) ((3 1) (2 0)))   (non-orig (ltk a c) (ltk b c))   (uniq-orig n-b k)-  (operation nonce-test (added-strand serv 3) k (1 0)+  (operation nonce-test (displaced 4 2 serv 3) k (1 0)     (enc b k n-a-0 n-b-0 (ltk a c)))   (traces     ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))@@ -1076,28 +617,8 @@     ((recv (cat b (enc a n-a-0 n-b-0 (ltk b c))))       (send (enc b k n-a-0 n-b-0 (ltk a c))) (send (enc a k (ltk b c))))     ((recv (cat a n-a-0)) (send (cat b (enc a n-a-0 n-b-0 (ltk b c))))))-  (label 38)-  (parent 36)-  (unrealized (0 3) (1 0))-  (comment "empty cohort"))--(defskeleton yahalom-  (vars (n-b n-a text) (a b c name) (k skey))-  (defstrand resp 4 (n-a n-a) (n-b n-b) (b b) (a a) (c c) (k k))-  (deflistener k)-  (defstrand serv 3 (n-a n-a) (n-b n-b) (c c) (a a) (b b) (k k))-  (precedes ((0 1) (2 0)) ((2 2) (0 2)) ((2 2) (1 0)))-  (non-orig (ltk a c) (ltk b c))-  (uniq-orig n-b k)-  (operation nonce-test (added-strand serv 3) k (1 0)-    (enc b k n-a n-b (ltk a c)))-  (traces-    ((recv (cat a n-a)) (send (cat b (enc a n-a n-b (ltk b c))))-      (recv (enc a k (ltk b c))) (recv (enc n-b k))) ((recv k) (send k))-    ((recv (cat b (enc a n-a n-b (ltk b c))))-      (send (enc b k n-a n-b (ltk a c))) (send (enc a k (ltk b c)))))-  (label 39)-  (parent 37)+  (label 24)+  (parent 22)   (unrealized (0 3) (1 0))   (comment "empty cohort"))